CVE-2026-31781: drm/ioc32: stop speculation on the drm_compat_ioctl path
In the Linux kernel, the following vulnerability has been resolved:
drm/ioc32: stop speculation on the drmcompatioctl path
The drm compat ioctl path takes a user controlled pointer, and then dereferences it into a table of function pointers, the signature method of spectre problems. Fix this up by calling arrayindexnospec() on the index to the function pointer list.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31781?
CVE-2026-31781 is considered a high severity vulnerability due to its potential to allow information disclosure through speculative execution.
How do I fix CVE-2026-31781?
To mitigate CVE-2026-31781, update your Linux kernel to the latest stable version that contains the patched code.
What types of systems are affected by CVE-2026-31781?
CVE-2026-31781 affects all versions of the Linux kernel that utilize the drm_compat_ioctl path.
What are the potential impacts of CVE-2026-31781?
Exploitation of CVE-2026-31781 could lead to information leakage by allowing an attacker to gain access to sensitive data.
Is CVE-2026-31781 actively being exploited?
As of the latest information, there is no evidence of active exploitation for CVE-2026-31781, but it is recommended to apply updates promptly.