CVE-2026-31742
kernel: vt: discard stale unicode buffer on alt screen exit after resize
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 1, 2026
Updated · July 2, 2026
Description
A flaw was found in the Linux kernel. When a console is resized while in an alternate screen mode, the system may fail to properly update its internal buffer for unicode characters. This can lead to an out-of-bounds memory access when the alternate screen mode is exited, potentially causing a system crash (kernel oops) and resulting in a Denial of Service (DoS).
Statement
The console/vt layer could retain a stale unicode buffer across alt-screen resize transitions; upstream discards it safely. Red Hat treats this as local TTY memory hygiene. Patch kernels; vt is core.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-131 · Incorrect Calculation of Buffer Size