CVE-2026-31782
- Source
- https://cve.org/CVERecord?id=CVE-2026-31782
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31782.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-31782
- Downstream
- Published
- 2026-05-01T14:15:08.586Z
- Modified
- 2026-06-18T03:54:46.328156669Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- perf/x86: Fix potential bad container_of in intel_pmu_hw_config
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
perf/x86: Fix potential bad containerof in intelpmuhwconfig
Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86hybridpmu and a containerof operation in intelpmusetacrcausedconstr (via the hybrid helper) could cause out of bound memory reads. Avoid this by guarding the call to intelpmusetacrcausedconstr with an isx86_event check.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31782.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/bfee04838f636d064bc92075c65c95f739003804
- https://git.kernel.org/stable/c/dbde07f06226438cd2cf1179745fa1bec5d8914a
- https://git.kernel.org/stable/c/e435a30ca6fe14c9611b1fc731c98a6d28410247
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31782.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-31782
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git