CVE-2026-31574: clockevents: Add missing resets of the next_event_forced flag
clockevents: Add missing resets of the nexteventforced flag
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.139.1-1 - Configuration
Add resets of the next_event_forced flag in the suspend wakeup handler, when a non-forced event is armed, and when the clock event state changes.
Linux kernel clockevents next_event_forced = reset
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31574?
CVE-2026-31574 is classified as a moderate severity vulnerability.
How do I fix CVE-2026-31574?
To fix CVE-2026-31574, update your Linux kernel to a version beyond 7.0.1 that includes the necessary patches.
Which versions of Linux kernel are affected by CVE-2026-31574?
CVE-2026-31574 affects all Linux kernel versions up to and including 7.0.1.
What does CVE-2026-31574 exploit?
CVE-2026-31574 exploits a flaw in the clockevents subsystem that can lead to timer interrupt starvation.
Who is responsible for addressing CVE-2026-31574?
The maintainers of the Linux kernel are responsible for addressing CVE-2026-31574 by releasing patches.