CVE-2026-31781

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically in the drm/ioc32 component. This vulnerability, related to speculative execution (a technique used by modern processors to guess future instructions), allows a local attacker to potentially disclose sensitive information. The drm_compat_ioctl path incorrectly handles user-controlled pointers, leading to a Spectre-like issue where data can be exposed through speculative execution side channels.

32-bit DRM compat ioctl must not speculate past validated user indices. Red Hat treats this as Spectre-class hardening for /dev/dri compat paths. Install updated kernels with the DRM fix.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.