Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-31594 Details

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to perform later. This leads to an oops when .allow_link fails or when .drop_link is performed. The following is an example oops of the former case: Unable to handle kernel paging request at virtual address dead000000000108 [...] [dead000000000108] address between user and kernel address ranges Internal error: Oops: 0000000096000044 [#1] SMP [...] Call trace: pci_epc_remove_epf+0x78/0xe0 (P) pci_primary_epc_epf_link+0x88/0xa8 configfs_symlink+0x1f4/0x5a0 vfs_symlink+0x134/0x1d8 do_symlinkat+0x88/0x138 __arm64_sys_symlinkat+0x74/0xe0 [...] Remove the helper, and drop pci_epc_put(). EPC device refcounting is tied to the configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0da63230d3ec1ec5fcc443a2314233e95bfece54 kernel.orgPatch
https://git.kernel.org/stable/c/305a0674bc552bfcc3231e23fb91cf4f62aec168 kernel.org
https://git.kernel.org/stable/c/478e776101592eb63298714e96823ef78a3295ec kernel.orgPatch
https://git.kernel.org/stable/c/73bf218de28d039126dc64281d2b47dd3c46a0a3 kernel.orgPatch
https://git.kernel.org/stable/c/a7a3cab4d33fd8a8aed864c447d0d7c99e85404e kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.0, < 6.6.136
>= 6.7, < 6.12.84
>= 6.13, < 6.18.24
>= 6.19, < 6.19.14
>= 7.0, < 7.0.1

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-31594
NVD Published Date:
Apr 24, 2026
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2026-31594 Details - Not Deferred