Medium 5.5Published Apr 24, 2026

CVE-2026-31542x86/platform/uv: Handle deconfigured sockets

Updated under an hour ago (Oct 28, 2026, 3:30 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This causes a panic while allocating UV hub info structures. Fix this by using NUMA_NO_NODE, allowing UV hub info structures to be allocated on valid nodes.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8a50c58519271dd24ba760bb282875f6ad66ee71 before c51957601d32c0d195bce0b9345dfe93ef5728cc; from 8a50c58519271dd24ba760bb282875f6ad66ee71 before 9956d4892e78812246336c7ea51f5aa62018049e; from 8a50c58519271dd24ba760bb282875f6ad66ee71 before 79f0faf81d3bbbe5f07bf6892450d3740a1b290d; from 8a50c58519271dd24ba760bb282875f6ad66ee71 before c1cf2218d2fa40a49921a7460981e5faab26f04e; 8a50c58519271dd24ba760bb282875f6ad66ee71 builds before 1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3	CNA record
linux linux_kernel linux:linux_kernel	from 6.5 before 6.6.130; from 6.7 before 6.12.78; from 6.13 before 6.18.20; from 6.19 before 6.19.10; 7.0; 7.0; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/c51957601d32c0d195bce0b9345dfe93ef5728cc	patch
https://git.kernel.org/stable/c/9956d4892e78812246336c7ea51f5aa62018049e	patch
https://git.kernel.org/stable/c/79f0faf81d3bbbe5f07bf6892450d3740a1b290d	patch
https://git.kernel.org/stable/c/c1cf2218d2fa40a49921a7460981e5faab26f04e	patch
https://git.kernel.org/stable/c/1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.