Search: CVE-2026-31473

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS <0.1%	CVE-2026-31473Linux kernel · Race Condition High7.8EPSS <0.1%2026-04-22CVE Database V5CVE-2026-31473 CVE-2026-31473 is a high-severity use-after-free vulnerability in the Linux kernel's media controller (mc) and Video4Linux2 (v4l2) subsystems. It arises from a race condition between MEDIA_REQUEST_IOC_REINIT and VIDIOC_REQBUFS queue teardown operations, which can lead to concurrent request object cleanup and vb2 queue cancellation. The vulnerability is addressed by serializing these operations using the req_queue_mutex to prevent parallel execution and ensure safe request cleanup. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2026-04-22

Page 1 of 1 · 1 duplicate CVE record merged