Skip to main content

Linux Kernel CVE-2026-31784

| EUVDEUVD-2026-26597 MEDIUM
2026-05-01 Linux
Information Disclosure Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SUSE
MEDIUM
qualitative
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

7
Analysis Generated
May 12, 2026 - 17:45 vuln.today
CVSS changed
May 12, 2026 - 15:22 NVD
5.5 (MEDIUM)
Patch available
May 01, 2026 - 16:33 EUVD
Patch released
May 01, 2026 - 15:24 nvd
Patch available
EUVD ID Assigned
May 01, 2026 - 15:00 euvd
EUVD-2026-26597
CVE Published
May 01, 2026 - 14:15 nvd
MEDIUM 5.5
CVE Published
May 01, 2026 - 14:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pxp: Clear restart flag in pxp_start after jumping back

If we don't clear the flag we'll keep jumping back at the beginning of the function once we reach the end.

(cherry picked from commit 0850ec7bb2459602351639dccf7a68a03c9d1ee0)

AnalysisAI

A denial-of-service vulnerability in the Linux kernel's DRM/XE PXP (Protected Execution) driver causes an infinite loop when a restart flag is not cleared after a jump operation, allowing local authenticated users to hang or crash the system. The vulnerability affects multiple kernel versions through a logic error in the pxp_start function that was resolved in stable patches for Linux 6.18.22, 6.19.12, and 7.0.

Technical ContextAI

The vulnerability exists in the Linux kernel's DRM/XE display driver subsystem, specifically in the Protected Execution (PXP) module which handles encrypted graphics content protection. The pxp_start function contains a control flow issue where a restart flag is not cleared after a jump operation returns to the beginning of the function, creating an infinite loop condition. This affects the Intel Xe GPU driver's PXP state machine initialization. The root cause is a missing flag reset in an exception or retry path, causing the function to repeatedly jump back to its entry point instead of proceeding through normal execution. The fix (upstream commit 0850ec7bb2459602351639dccf7a68a03c9d1ee0) adds explicit flag clearing to prevent this loop.

RemediationAI

Apply the latest stable kernel patch: Linux 6.18.22, Linux 6.19.12, or Linux 7.0 as appropriate for your deployed version. The fix is available from the Linux kernel stable Git repository at the commit hashes provided (9e962e68a9d26135af67c423767c0983d9ad94c3, 400ee45f80480c05c3fa673967f25faab8323753, 76903b2057c8677c2c006e87fede15f496555dc0). Organizations unable to patch immediately should restrict local user access and disable DRM/XE GPU support via kernel boot parameters if the PXP functionality is not required (trade-off: loss of protected graphics execution capability). Monitor for unexpected kernel hang or soft lockup messages in dmesg related to pxp_start function calls, which would indicate attempted exploitation or trigger conditions.

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2026-31784 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy