CVE-2026-31678

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31678
In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/42f0d3d81209654c08ffdde5a34b9b92d2645896 Patch
https://git.kernel.org/stable/c/6931d21f87bc6d657f145798fad0bf077b82486c Patch
https://git.kernel.org/stable/c/98b726ab5e2a4811e27c28e4d041f75bba147eab Patch
https://git.kernel.org/stable/c/9d56aced21fb9c104e8a3f3be9b21fbafe448ffc Patch
https://git.kernel.org/stable/c/b8c56a3fc5d879c0928f207a756b0f067f06c6a8 Patch
https://git.kernel.org/stable/c/bbe7bd722bfaea36aab3da6cc60fb4a05c644643 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
History

06 May 2026, 21:28

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/42f0d3d81209654c08ffdde5a34b9b92d2645896 - () https://git.kernel.org/stable/c/42f0d3d81209654c08ffdde5a34b9b92d2645896 - Patch
References () https://git.kernel.org/stable/c/6931d21f87bc6d657f145798fad0bf077b82486c - () https://git.kernel.org/stable/c/6931d21f87bc6d657f145798fad0bf077b82486c - Patch
References () https://git.kernel.org/stable/c/98b726ab5e2a4811e27c28e4d041f75bba147eab - () https://git.kernel.org/stable/c/98b726ab5e2a4811e27c28e4d041f75bba147eab - Patch
References () https://git.kernel.org/stable/c/9d56aced21fb9c104e8a3f3be9b21fbafe448ffc - () https://git.kernel.org/stable/c/9d56aced21fb9c104e8a3f3be9b21fbafe448ffc - Patch
References () https://git.kernel.org/stable/c/b8c56a3fc5d879c0928f207a756b0f067f06c6a8 - () https://git.kernel.org/stable/c/b8c56a3fc5d879c0928f207a756b0f067f06c6a8 - Patch
References () https://git.kernel.org/stable/c/bbe7bd722bfaea36aab3da6cc60fb4a05c644643 - () https://git.kernel.org/stable/c/bbe7bd722bfaea36aab3da6cc60fb4a05c644643 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
CWE CWE-367

27 Apr 2026, 15:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

25 Apr 2026, 09:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-25 09:16

Updated : 2026-05-06 21:28

NVD link : CVE-2026-31678

Mitre link : CVE-2026-31678

CVE.ORG link : CVE-2026-31678

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition