Medium 5.5Published Apr 22, 2026

CVE-2026-31480tracing: Fix potential deadlock in cpu hotplug with osnoise

Updated under an hour ago (Oct 27, 2026, 2:20 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with osnoise The following sequence may leads deadlock in cpu hotplug: task1 task2 task3 ----- ----- ----- mutex_lock(&interface_lock) [CPU GOING OFFLINE] cpus_write_lock(); osnoise_cpu_die(); kthread_stop(task3); wait_for_completion(); osnoise_sleep(); mutex_lock(&interface_lock); cpus_read_lock(); [DEAD LOCK] Fix by swap the order of cpus_read_lock() and mutex_lock(&interface_lock).

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before cf929c21eeed5bd39873fb14bfdfff963fa6f1da; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before 7aa095ce7d224308cb6979956f0de8607df93d4f; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before ef41a85a55022e27cdaebf22a6676910b66f65aa; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before 03474a01c199de17a8e2d39b51df6beb9c76e831; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before f278b8ebf7eba2a1699cfc7bf30dd3ef898d60d7; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before 7a41d4633cd2c15eb5ed31e8f3b16910e50a8c9f; from bce29ac9ce0bb0b0b146b687ab978378c21e9078 before 1f9885732248d22f788e4992c739a98c88ab8a55	CNA record
linux linux_kernel linux:linux_kernel	from 5.14.1 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 5.14; 7.0; and 6 more ranges	NVD

References

References

https://git.kernel.org/stable/c/cf929c21eeed5bd39873fb14bfdfff963fa6f1da	patch
https://git.kernel.org/stable/c/7aa095ce7d224308cb6979956f0de8607df93d4f	patch
https://git.kernel.org/stable/c/ef41a85a55022e27cdaebf22a6676910b66f65aa	patch
https://git.kernel.org/stable/c/03474a01c199de17a8e2d39b51df6beb9c76e831	patch
https://git.kernel.org/stable/c/f278b8ebf7eba2a1699cfc7bf30dd3ef898d60d7	patch
https://git.kernel.org/stable/c/7a41d4633cd2c15eb5ed31e8f3b16910e50a8c9f	patch
https://git.kernel.org/stable/c/1f9885732248d22f788e4992c739a98c88ab8a55	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.