Medium 5.5Published Apr 22, 2026

CVE-2026-31482s390/entry: Scrub r12 register on kernel entry

Updated under an hour ago (Oct 27, 2026, 1:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before commit f33f2d4c7c80 ("s390/bp: remove TIF_ISOLATE_BP"), all entry handlers loaded r12 with the current task pointer (lg %r12,__LC_CURRENT) for use by the BPENTER/BPEXIT macros. That commit removed TIF_ISOLATE_BP, dropping both the branch prediction macros and the r12 load, but did not add r12 to the register clearing sequence. Add the missing xgr %r12,%r12 to make the register scrub consistent across all entry points.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f33f2d4c7c80c641f6ca3dfe5e7dfe1f91543780 before a58d298a83a3a9b7ca99ded9d60a1e77231159ef; from f33f2d4c7c80c641f6ca3dfe5e7dfe1f91543780 before 95c899cd791803a5bf7b73e5994fbbe1cc1a9c36; from f33f2d4c7c80c641f6ca3dfe5e7dfe1f91543780 before 7f4e3233faa8470dd0627bc49b2809f2bfebd909; from f33f2d4c7c80c641f6ca3dfe5e7dfe1f91543780 before 99a8b420f3f0e162eb9c9c9253929d4d23f9bd30; from f33f2d4c7c80c641f6ca3dfe5e7dfe1f91543780 before 0738d395aab8fae3b5a3ad3fc640630c91693c27	CNA record
linux linux_kernel linux:linux_kernel	from 6.4.1 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 6.4; 7.0; 7.0; 7.0; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a58d298a83a3a9b7ca99ded9d60a1e77231159ef	patch
https://git.kernel.org/stable/c/95c899cd791803a5bf7b73e5994fbbe1cc1a9c36	patch
https://git.kernel.org/stable/c/7f4e3233faa8470dd0627bc49b2809f2bfebd909	patch
https://git.kernel.org/stable/c/99a8b420f3f0e162eb9c9c9253929d4d23f9bd30	patch
https://git.kernel.org/stable/c/0738d395aab8fae3b5a3ad3fc640630c91693c27	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.