Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the TH1520 AON firmware protocol driver: 1. Fix a potential buffer overflow where the code used unsafe pointer arithmetic to access the 'mode' field through the 'resource' pointer with an offset. This was flagged by Smatch static checker as: "buffer overflow 'data' 2 <= 3" 2. Replace custom RPC_SET_BE* and RPC_GET_BE* macros with standard kernel endianness conversion macros (cpu_to_be16, etc.) for better portability and maintainability. The functionality was re-tested with the GPU power-up sequence, confirming the GPU powers up correctly and the driver probes successfully. [ 12.702370] powervr ffef400000.gpu: [drm] loaded firmware powervr/rogue_36.52.104.182_v1.fw [ 12.711043] powervr ffef400000.gpu: [drm] FW version v1.0 (build 6645434 OS) [ 12.719787] [drm] Initialized powervr 1.0.0 for ffef400000.gpu on minor 0
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-27 | 2 | Disclosure1Patch1 |
| 2026-04-28 | 1 | Disclosure1 |
A new vulnerability with increased severity was disclosed for Linux Kernel (CVE-2026-31690) https://vuldb.com/vuln/359862
Post summary
The post announces the disclosure of CVE‑2026‑31690, a Linux Kernel vulnerability with increased severity, but offers no further technical details, PoCs, or remediation advice.
CVE-2026-31690 Buffer Overflow and Endianness Macro Issues in Linux Kernel TH1520 AON Firmware Driver https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31690
Post summary
The post announces CVE-2026-31690, detailing buffer overflow and endianness macro issues in the Linux kernel TH1520 AON firmware driver, but provides no PoC, exploit code, or patch information.
CVE-2026-31690 In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the … https://www.cve.org/CVERecord?id=CVE-2026-31690
Post summary
CVE-2026-31690 is a resolved Linux kernel buffer overflow vulnerability in firmware 'thead' that has been patched, with details about the overflow and endian macro fix provided.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |