CVE-2026-31435
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-125
Lectura fuera de límites
Fecha de publicación:
22/04/2026
Última modificación:
19/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netfs: Fix read abandonment during retry<br />
<br />
Under certain circumstances, all the remaining subrequests from a read<br />
request will get abandoned during retry. The abandonment process expects<br />
the &#39;subreq&#39; variable to be set to the place to start abandonment from, but<br />
it doesn&#39;t always have a useful value (it will be uninitialised on the<br />
first pass through the loop and it may point to a deleted subrequest on<br />
later passes).<br />
<br />
Fix the first jump to "abandon:" to set subreq to the start of the first<br />
subrequest expected to need retry (which, in this abandonment case, turned<br />
out unexpectedly to no longer have NEED_RETRY set).<br />
<br />
Also clear the subreq pointer after discarding superfluous retryable<br />
subrequests to cause an oops if we do try to access it.
Impacto
Puntuación base 3.x
8.80
Gravedad 3.x
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (incluyendo) | 6.18.21 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.11 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



