Skip to main content

Linux Kernel CVE-2026-31542

| EUVDEUVD-2026-25435 MEDIUM
2026-04-24 Linux GHSA-crf5-4j2q-5xrq
Information Disclosure Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SUSE
MEDIUM
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

7
Analysis Generated
Apr 28, 2026 - 18:52 vuln.today
CVSS changed
Apr 28, 2026 - 18:52 NVD
5.5 (MEDIUM)
Patch released
Apr 28, 2026 - 18:48 nvd
Patch available
Patch available
Apr 24, 2026 - 16:01 EUVD
EUVD ID Assigned
Apr 24, 2026 - 15:00 euvd
EUVD-2026-25435
Analysis Generated
Apr 24, 2026 - 15:00 vuln.today
CVE Published
Apr 24, 2026 - 14:33 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

x86/platform/uv: Handle deconfigured sockets

When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This causes a panic while allocating UV hub info structures.

Fix this by using NUMA_NO_NODE, allowing UV hub info structures to be allocated on valid nodes.

AnalysisAI

Denial of service in Linux kernel x86/platform/uv module when sockets are deconfigured, causing kernel panic during UV hub info structure allocation on systems with SGI UV architecture. Affects authenticated local attackers with standard user privileges. Vendor-released patches available for multiple kernel versions (6.6.130, 6.12.78, 6.18.20, 6.19.10 and others). EPSS score of 0.02% indicates exploitation is unlikely in typical environments despite low CVSS score barrier.

Technical ContextAI

The vulnerability exists in x86 platform-specific code for SGI UV (UltraViolet) architecture systems. When a CPU socket is deconfigured or disabled, the kernel maps it to SOCK_EMPTY (0xffff), a sentinel value indicating an invalid socket ID. During UV hub information structure allocation, the code does not properly handle this invalid socket mapping, causing it to attempt memory allocation operations on an undefined NUMA node, resulting in a kernel panic. The fix uses NUMA_NO_NODE as a fallback for deconfigured sockets, allowing the kernel to gracefully allocate memory on valid nodes instead. This is platform-specific code affecting only systems using SGI UV interconnect architecture, not general x86 systems.

RemediationAI

Update Linux kernel to patched versions: 6.6.130, 6.12.78, 6.18.20, 6.19.10, or 7.0 depending on currently deployed branch. Apply kernel patches from upstream commits c51957601d32c0d195bce0b9345dfe93ef5728cc, 9956d4892e78812246336c7ea51f5aa62018049e, 79f0faf81d3bbbe5f07bf6892450d3740a1b270d, c1cf2218d2fa40a49921a7460981e5faab26f04e, or 1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3 via git.kernel.org/stable. For systems unable to immediately patch, restrict local access to non-privileged user accounts and disable SGI UV platform support in kernel configuration if SGI UV hardware is not in use, reducing exposure surface. Kernel rebuild and reboot required for patch application. References: https://git.kernel.org/stable/c/c51957601d32c0d195bce0b9345dfe93ef5728cc, https://nvd.nist.gov/vuln/detail/CVE-2026-31542

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2026-31542 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy