CVE-2026-31530: Linux kernel · cxl/port: Fix use after free of parent_port in cxl_detach_ep()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in f7dc6f381a1e5f068333f1faa9265d6af1df4235 : patch Linux kernel soon.
Data as of 26 Oct 2026, 21:00 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in f7dc6f381a1e5f068333f1faa9265d6af1df4235, d216a4bd138eb57cc4ae7c43b2f709e3482af7e2, b1f62588ab1be6c9535d74348003c86b47ec4abd +2
Exploitation evidence
Disclosed: evidence found.
CVE published 22 Apr 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and included in Linux kernel version 6.3. Users should upgrade to this or later versions to remediate the vulnerability. No additional mitigation steps are required beyond applying the official fix.
Description
A use-after-free vulnerability in the Linux kernel's cxl_detach_ep() function was fixed. The flaw involved improper handling of parent_port references during device removal, leading to potential memory corruption when unlocking or unregistering ports. The issue was resolved by enforcing a lifetime guarantee between child and parent ports, ensuring the parent device remains valid throughout the child's lifetime.
References
- git.kernel.org/stable/c/b1f62588ab1be6c9535d74348003c86b47ec4abd (opens in a new tab)
- git.kernel.org/stable/c/d216a4bd138eb57cc4ae7c43b2f709e3482af7e2 (opens in a new tab)
- git.kernel.org/stable/c/2c32141462045cf93d54a5146a0ba572b83533dd (opens in a new tab)
- git.kernel.org/stable/c/f7dc6f381a1e5f068333f1faa9265d6af1df4235 (opens in a new tab)
- git.kernel.org/stable/c/19d2f0b97a131198efc2c4ca3eb7f980bba8c2b4 (opens in a new tab)