PT-2026-34999 · Linux · Linux Kernel

CVE-2026-31647

·

Published

2026-04-24

·

Updated

2026-08-30

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the idpf driver regarding PREEMPT RT raw/bh spinlock nesting during asynchronous VC handling. The problem occurs because the async handler takes a BH spinlock while holding a completion raw spinlock, leading to an invalid wait context. This is addressed by switching from the completion raw spinlock to a local lock within the idpf vc xn struct, as the complete() and complete all() functions are called outside the lock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-31647
OPENSUSE-SU-2026:21388-1
SUSE-SU-2026:22742-1
SUSE-SU-2026:22769-1
SUSE-SU-2026:22812-1
SUSE-SU-2026:22835-1
SUSE-SU-2026:2799-1
SUSE-SU-2026:2800-1

Affected Products

Linux Kernel