CVE-2026-31769
kernel: gpib: fix use-after-free in IO ioctl handlers
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's gpib module. This use-after-free vulnerability allows a local attacker to trigger a condition where memory is accessed after it has been freed. By concurrently calling specific ioctl handlers, an attacker could cause a system crash, leading to a denial of service, or potentially execute arbitrary code with elevated privileges.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count