CVE-2026-31490
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the data pointer is not set to NULL, which can trigger use-after-free in subsequent .write() calls. Set the pointer to NULL upon error to fix the problem. (cherry picked from commit 4f53d8c6d23527d734fe3531d08e15cb170a0819)
SeverityHigh
CVSS7.8
Exploit probability2. percentile0.1%
Product
Linux Kernel
PublishedApr 22, 2026
First seenApr 22, 2026
How to fix
Update
- linux linux_kernel6.19.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.19.1 ≤ v < 6.19.11, 6.19, 7.0 | 6.19.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.