Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-31573

Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/04/2026
Última modificación:
27/04/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: verisilicon: Fix kernel panic due to __initconst misuse<br /> <br /> Fix a kernel panic when probing the driver as a module:<br /> <br /> Unable to handle kernel paging request at virtual address<br /> ffffd9c18eb05000<br /> of_find_matching_node_and_match+0x5c/0x1a0<br /> hantro_probe+0x2f4/0x7d0 [hantro_vpu]<br /> <br /> The imx8mq_vpu_shared_resources array is referenced by variant<br /> structures through their shared_devices field. When built as a<br /> module, __initconst causes this data to be freed after module<br /> init, but it&amp;#39;s later accessed during probe, causing a page fault.<br /> <br /> The imx8mq_vpu_shared_resources is referenced from non-init code,<br /> so keeping __initconst or __initconst_or_module here is wrong.<br /> <br /> Drop the __initconst annotation and let it live in the normal .rodata<br /> section.<br /> <br /> A bug of __initconst called from regular non-init probe code<br /> leading to bugs during probe deferrals or during unbind-bind cycles.

Productos y versiones vulnerables

CPE Desde Hasta
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19.6 (incluyendo) 6.19.11 (excluyendo)