CVE-2026-31690
published 2026-04-27CVE-2026-31690: In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
3.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
firmware: thead: Fix buffer overflow and use standard endian macros
Addresses two issues in the TH1520 AON firmware protocol driver:
1. Fix a potential buffer overflow where the code used unsafe pointer
arithmetic to access the 'mode' field through the 'resource' pointer
with an offset. This was flagged by Smatch static checker as:
"buffer overflow 'data' 2 <= 3"
2. Replace custom RPC_SET_BE* and RPC_GET_BE* macros with standard
kernel endianness conversion macros (cpu_to_be16, etc.) for better
portability and maintainability.
The functionality was re-tested with the GPU power-up sequence,
confirming the GPU powers up correctly and the driver probes
successfully.
[ 12.702370] powervr ffef400000.gpu: [drm] loaded firmware
powervr/rogue_36.52.104.182_v1.fw
[ 12.711043] powervr ffef400000.gpu: [drm] FW version v1.0 (build
6645434 OS)
[ 12.719787] [drm] Initialized powervr 1.0.0 for ffef400000.gpu on
minor 0
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= e4b3cbd840e565484d0ad8d260d27c057466ed17 < fbdb43f6bb2a15ed382d6eb0ef82c8b07b0d47bb | fbdb43f6bb2a15ed382d6eb0ef82c8b07b0d47bb |
| linux | linux | >= e4b3cbd840e565484d0ad8d260d27c057466ed17 < bd15a5deb5a7251dc1a0cf9186f0253f7eacdb97 | bd15a5deb5a7251dc1a0cf9186f0253f7eacdb97 |
| linux | linux | >= e4b3cbd840e565484d0ad8d260d27c057466ed17 < 88c4bd90725557796c15878b7cb70066e9e6b5ab | 88c4bd90725557796c15878b7cb70066e9e6b5ab |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.15 < 6.18.23 | 6.18.23 |
| linux | linux_kernel | >= 6.19 < 6.19.13 | 6.19.13 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: firmware: thead: Fix buffer overflow and use standard endian macros
vendor_redhat·2026-04-27
CVE-2026-31690 CWE-823 kernel: firmware: thead: Fix buffer overflow and use standard endian macros
kernel: firmware: thead: Fix buffer overflow and use standard endian macros
A flaw was found in the Linux kernel's TH1520 AON firmware protocol driver. This buffer overflow vulnerability arises from unsafe pointer arithmetic used to access the 'mode' field through the 'resource' pointer with an offset. This could potentially lead to memory corruption within the kernel.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not af
VulDB
Linux Kernel up to 6.18.22/6.19.12 cpu_to_be16 buffer overflow
vuldb·2026-04-27
CVE-2026-31690 [CRITICAL] Linux Kernel up to 6.18.22/6.19.12 cpu_to_be16 buffer overflow
A vulnerability was found in Linux Kernel up to 6.18.22/6.19.12. It has been classified as critical. The impacted element is the function cpu_to_be16. The manipulation leads to buffer overflow.
This vulnerability is documented as CVE-2026-31690. The attack requires being on the local network. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-3j3v-v8vh-9mw9: In the Linux kernel, the following vulnerability has been resolved:
firmware: thead: Fix buffer overflow and use standard endian macros
Addresses tw
ghsa_unreviewed·2026-04-27
CVE-2026-31690 [HIGH] CWE-787 GHSA-3j3v-v8vh-9mw9: In the Linux kernel, the following vulnerability has been resolved:
firmware: thead: Fix buffer overflow and use standard endian macros
Addresses tw
In the Linux kernel, the following vulnerability has been resolved:
firmware: thead: Fix buffer overflow and use standard endian macros
Addresses two issues in the TH1520 AON firmware protocol driver:
1. Fix a potential buffer overflow where the code used unsafe pointer
arithmetic to access the 'mode' field through the 'resource' pointer
with an offset. This was flagged by Smatch static checker as:
"buffer overflow 'data' 2 <= 3"
2. Replace custom RPC_SET_BE* and RPC_GET_BE* macros with standard
kernel endianness conversion macros (cpu_to_be16, etc.) for better
portability and maintainability.
The functionality was re-tested with the GPU power-up sequence,
confirming the GPU powers up correctly and the driver probes
successfully.
[ 12.702370] powervr ffef400000.gpu: [drm] loaded firm
No detection rules found.
No public exploits indexed.
2026-04-27
Published