Use-after-free in Linux kernel - CVE-2026-31473
Published: April 24, 2026
Vulnerability identifier: #VU127680
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-31473
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to use-after-free in the media request and videobuf queue handling code when reinitializing media requests concurrently with queue teardown. A local user can trigger concurrent MEDIA_REQUEST_IOC_REINIT and VIDIOC_REQBUFS(0) operations to cause a denial of service.
Only request-capable devices are affected.
How to mitigate CVE-2026-31473
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/1a0d9083c24fbd5d22f7100f09d11e4d696a5f01
- https://git.kernel.org/stable/c/2c685e99efb3b3bd2b78699fba6b1cf321975db0
- https://git.kernel.org/stable/c/331242998a7ade5c2f65e14988901614629f3db5
- https://git.kernel.org/stable/c/585fd9a2063dacce8b2820f675ef23d5d17434c5
- https://git.kernel.org/stable/c/72b9e81e0203f03c40f3adb457f55bd4c8eb112d
- https://git.kernel.org/stable/c/bef4f4a88b73e4cc550d25f665b8a9952af22773
- https://git.kernel.org/stable/c/cf2023e84f0888f96f4b65dc0804e7f3651969c1
- https://git.kernel.org/stable/c/d8549a453d5bdc0a71de66ad47a1106703406a56