SB2026050267 - Out-of-bounds read in Linux kernel events intel

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-31782)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in intel_pmu_set_acr_caused_constr when handling groups of events that include software events during auto counter reload. A local user can trigger this condition to disclose sensitive information.

The issue occurs because a software event PMU may be processed through the hybrid helper path even though it is not an x86 event.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/bfee04838f636d064bc92075c65c95f739003804
• https://git.kernel.org/stable/c/dbde07f06226438cd2cf1179745fa1bec5d8914a
• https://git.kernel.org/stable/c/e435a30ca6fe14c9611b1fc731c98a6d28410247