VulnSocial

CVE-2026-31389Patch(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 2 mentions (2026-04-03); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
linux
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-03: 2Mentions · 2026-05-30: 1Patch / Workaround · 2026-04-03: 2Patch / Workaround · 2026-05-30: 1Technical Details · 2026-04-03: 1Technical Details · 2026-05-30: 104-0305-30
Signal classification1 categories
Patch
3100.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-032
Patch2
2026-05-301
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-31389 (CVSS 7.8) Linux kernel SPI subsystem use-after-free flaw enables local privilege escalation. Affects controller registration failure path. Patch immediately. #CVE #Vulnerability #PatchNow #Linux https://t.co/GwvKHM0CKz

    Post summary

    CVE‑2026‑31389 is a high‑severity use‑after‑free flaw in the Linux kernel SPI subsystem that allows local privilege escalation; a patch is immediately available.

    0000070
    32 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-31389 In the Linux kernel, the following vulnerability has been resolved: spi https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31389

    Post summary

    The entry indicates that CVE-2026-31389 in the Linux kernel’s spi component has been fixed, but provides minimal technical detail.

    0000054
    4.0K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-31389 In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver c… https://www.cve.org/CVERecord?id=CVE-2026-31389

    Post summary

    The Linux kernel’s CVE‑2026‑31389, a use‑after‑free in SPI controller registration, has been fixed; the CVE record confirms a patch is available.

    0000073
    56.9K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities