CVE-2026-31490
Published: Apr 22, 2026
Modified: May 11, 2026
CVSS v3.1
7.8
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the data pointer is not set to NULL, which can trigger use-after-free in subsequent .write() calls. Set the pointer to NULL upon error to fix the problem. (cherry picked from commit 4f53d8c6d23527d734fe3531d08e15cb170a0819)
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1ed30397c0b92b97381dbd11362fdbbf93e046d2 - < e28552b4ddea5cb4725380dd08237831af835124affected 1ed30397c0b92b97381dbd11362fdbbf93e046d2 - < 87997b6c6516e049cbaf2fc6810b213d587a06b1 |
Linux | Linux | affected 6.19unaffected 0 - < 6.19unaffected 6.19.11 - <= 6.19.*unaffected 7.0 - <= * |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now