PT-2026-36377 · Linux · Linux Kernel

CVE-2026-31742

·

Published

2026-03-27

·

Updated

2026-05-23

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the virtual terminal (vt) component where the kernel fails to discard a stale unicode buffer upon exiting the alternate screen after a console resize. When enter alt screen() saves vc uni lines into vc saved uni lines and sets vc uni lines to NULL, a subsequent resize via vc do resize() skips reallocating the unicode buffer. Consequently, when leave alt screen() restores vc saved uni lines, the buffer dimensions do not match the current vc rows and vc cols. Operations that iterate over the unicode buffer using current dimensions, such as the csi J function for clearing the screen, can access memory out of bounds, leading to a kernel oops.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10894
CVE-2026-31742

Affected Products

Linux Kernel