VulnSocial

CVE-2026-31554General(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sys_futex_requeue() is used with different flags. The initial motivation for allowing different flags was the variable sized futex, but since that hasn't been merged (yet), simply mandate the flags are identical, as is the case for the old style sys_futex() requeue operations.

linux CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-04-24); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
linux
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-04-24: 1Mentions · 2026-07-08: 1Mentions · 2026-07-09: 1Technical Details · 2026-04-24: 1Technical Details · 2026-07-09: 104-2407-0807-09
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-241
General1
2026-07-081
General1
2026-07-091
Disclosure1
Full discourse3 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-43499,GhostLock: Linux kernel: Stack-UAF and LPE via futex in kernels 2.6.39 till 7.1 https://www.openwall.com/lists/oss-security/2026/07/08/12 Other recent futex bugs CVE-2026-23415, CVE-2026-31554, CVE-2026-52973 https://www.openwall.com/lists/oss-security/2026/07/09/1 All 4 have same CVSS 7.8 per kernel CNA https://x.com/nebusecurity/status/2074663573742338256

    Post summary

    The post announces new Linux kernel Stack‑UAF and LPE vulnerabilities via futex, provides CVSS scores, and links to security mailing list discussions.

    01002774.1K
    4.7K followersView on X
  • Solar Designer@solardiz
    General

    @nebusecurity Can you please bring this to oss-security, preferably with actual detail right in the posting (but do include the blog link as well). Maybe include your thoughts on / comparison to other recent futex bugs CVE-2026-23415, CVE-2026-31554, CVE-2026-52973 with same CVSS. Thank you!

    Post summary

    The message requests additional detail and comparison for several futex CVEs but does not itself provide technical, exploit, or patch information.

    10000326
    13.2K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-31554 In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found … https://www.cve.org/CVERecord?id=CVE-2026-31554

    Post summary

    The text merely notes that CVE‑2026‑31554, a futex-related flaw in the Linux kernel, has been resolved, providing a brief technical description but no PoC, exploit, or patch details.

    00000152
    57.2K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.7--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities