PT-2026-35138

CVE-2026-31678

·

Published

2026-03-20

·

Updated

2026-10-20

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A race condition exists in the Open vSwitch component of the Linux kernel. The ovs netdev tunnel destroy() function may execute after the NETDEV UNREGISTER process has already detached the device. Releasing the netdev reference during the destroy process can conflict with concurrent readers that still observe vport->dev.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:82806
ALSA-2026:82807
ALSA-2026:85321
ALSA-2026:86033
AZL-84216
ECHO-78CB-C86F-9F8E
OESA-2026-2579
OESA-2026-2580
OESA-2026-2581
OESA-2026-2582
OPENSUSE-SU-2026:20826-1
RHSA-2026:82806
RHSA-2026:82807
SUSE-SU-2026:21834-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
SUSE-SU-2026:22108-1
SUSE-SU-2026:22137-1
SUSE-SU-2026:22433-1
SUSE-SU-2026:22458-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:2450-1
SUSE-SU-2026:2482-1
SUSE-SU-2026:2591-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
SUSE-SU-2026:3594-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8619-1
USN-8665-1
Found an issue in the description? Have something to add? Feel free to write us 👾