QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-31781

Back to search

CVE-2026-31781

Published: May 1, 2026

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_ioctl path The drm compat ioctl path takes a user controlled pointer, and then dereferences it into a table of function pointers, the signature method of spectre problems. Fix this up by calling array_index_nospec() on the index to the function pointer list.

VendorProductVersions

Linux

Linux

affected
505b5240329b922f21f91d5b5d1e535c805eca6d - < 46a60ee8956ef1975f00455f614761c7ecedc09d
affected
505b5240329b922f21f91d5b5d1e535c805eca6d - < 5bb398991f378ef74d90b14a6ea8b61ff96cc03a
affected
505b5240329b922f21f91d5b5d1e535c805eca6d - < d59c5d8539662d95887b4564f3f72ad38076a2d5
affected
505b5240329b922f21f91d5b5d1e535c805eca6d - < 489f2ef2b908898d01df697dc4fe1476674be640
affected
505b5240329b922f21f91d5b5d1e535c805eca6d - < 4a41c2b18fc05d30b718d2602cac339eae710b34

+13 more versions

Linux

Linux

affected
4.20
unaffected
0 - < 4.20
unaffected
5.10.253 - <= 5.10.*
unaffected
5.15.203 - <= 5.15.*
unaffected
6.1.168 - <= 6.1.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now