CVE-2026-31786

A flaw was found in the Linux kernel. A buffer overflow vulnerability exists in the Xen hypervisor driver (drivers/xen/sys-hypervisor.c). This flaw occurs because the HYPERVISOR_xen_version(XENVER_build_id) function returns a build ID that is not properly null-terminated. When the buildid_show function attempts to process this non-null-terminated string using sprintf, it can read and copy beyond the intended buffer boundary, potentially leading to a denial of service or other unspecified impacts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.