CVE-2026-31678

Source
https://cve.org/CVERecord?id=CVE-2026-31678
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31678.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-31678
Downstream
Published
2026-04-25T08:46:54.476Z
Modified
2026-04-26T04:22:21.355721Z
Summary
openvswitch: defer tunnel netdev_put to RCU release
Details

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: defer tunnel netdev_put to RCU release

ovsnetdevtunneldestroy() may run after NETDEVUNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev.

Do not release vport->dev in ovsnetdevtunneldestroy(). Instead, let vportnetdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31678.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a9020fde67a6eb77f8130feff633189f99264db1
Fixed
9d56aced21fb9c104e8a3f3be9b21fbafe448ffc
Fixed
42f0d3d81209654c08ffdde5a34b9b92d2645896
Fixed
bbe7bd722bfaea36aab3da6cc60fb4a05c644643
Fixed
98b726ab5e2a4811e27c28e4d041f75bba147eab
Fixed
b8c56a3fc5d879c0928f207a756b0f067f06c6a8
Fixed
6931d21f87bc6d657f145798fad0bf077b82486c

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31678.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
6.1.168
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.131
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.80
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.21
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31678.json"