CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path

Q: What is the severity of CVE-2026-31555?

CVE-2026-31555 has been rated as a high-severity vulnerability due to its potential impact on Linux kernel stability.

Q: How do I fix CVE-2026-31555?

To remediate CVE-2026-31555, upgrade your Linux kernel to the latest stable version that addresses this issue.

Q: What are the affected versions of Linux for CVE-2026-31555?

CVE-2026-31555 affects multiple Linux kernel versions, specifically those between 4.4.255 and 6.19.

Q: What types of systems are impacted by CVE-2026-31555?

CVE-2026-31555 impacts any system running vulnerable versions of the Linux kernel.

Q: Has CVE-2026-31555 been actively exploited in the wild?

As of now, there are no confirmed reports of active exploitation of CVE-2026-31555 in the wild.

Published Apr 24, 2026

Updated

futex: Clear stale exiting pointer in futexlockpi() retry path

Affected Software

31 affected componentsFixes available

Linux Linux kernel

Microsoft azl3 kernel 6.6.130.1-3

Patch available

Linux Linux kernel>=4.4.255<4.5

Linux Linux kernel>=4.9.255<4.10

Linux Linux kernel>=4.14.158<4.15

Linux Linux kernel>=4.19.172<4.20

Linux Linux kernel>=5.4.1<5.5

Linux Linux kernel>=5.5.1<5.10.253

Linux Linux kernel>=5.11<5.15.203

Linux Linux kernel>=5.16<6.1.168

Linux Linux kernel>=6.2<6.6.131

Linux Linux kernel>=6.7<6.12.80

Linux Linux kernel>=6.13<6.18.21

Linux Linux kernel>=6.19<6.19.11

Linux Linux kernel=5.5

Linux Linux kernel=7.0-rc1

Linux Linux kernel=7.0-rc2

Linux Linux kernel=7.0-rc3

Linux Linux kernel=7.0-rc4

Linux Linux kernel=7.0-rc5

Linux Linux kernel=7.0-rc6

Linux Linux kernel=7.0-rc7

Microsoft azl3 kernel 6.6.130.1-3<6.6.134.1-2

6.6.134.1-2

linux/kernel>=5.5.0<5.10.253

5.10.253

linux/kernel>=5.11.0<5.15.203

5.15.203

linux/kernel>=5.16.0<6.1.168

6.1.168

linux/kernel>=6.2.0<6.6.131

6.6.131

linux/kernel>=6.7.0<6.12.80

6.12.80

linux/kernel>=6.13.0<6.18.21

6.18.21

linux/kernel>=6.19.0<6.19.11

6.19.11

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.134.1-2
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.253
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.203
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.168
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.131
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.12.80
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.18.21
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.19.11
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.14-1

Event History

Apr 24, 2026

CVE Published

via MITRE·02:35 PM

Data Sourced

via MITRE·02:35 PM

Description

Data Sourced

via OSV·02:35 PM

DescriptionAffected Software

Data Sourced

via NVD·03:16 PM

RemedyDescriptionSeverityAffected Software

Apr 26, 2026

Data Sourced

via Microsoft·08:01 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2026-31555?

CVE-2026-31555 has been rated as a high-severity vulnerability due to its potential impact on Linux kernel stability.

How do I fix CVE-2026-31555?

To remediate CVE-2026-31555, upgrade your Linux kernel to the latest stable version that addresses this issue.

What are the affected versions of Linux for CVE-2026-31555?

CVE-2026-31555 affects multiple Linux kernel versions, specifically those between 4.4.255 and 6.19.

What types of systems are impacted by CVE-2026-31555?

CVE-2026-31555 impacts any system running vulnerable versions of the Linux kernel.

Has CVE-2026-31555 been actively exploited in the wild?

As of now, there are no confirmed reports of active exploitation of CVE-2026-31555 in the wild.

CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-31555?

How do I fix CVE-2026-31555?

What are the affected versions of Linux for CVE-2026-31555?

What types of systems are impacted by CVE-2026-31555?

Has CVE-2026-31555 been actively exploited in the wild?

Company

Resources

Contact