Search: CVE-2026-31786

CVE-2026-31786 is a high-severity buffer overflow vulnerability in the Linux kernel's Xen hypervisor driver (drivers/xen/sys-hypervisor.c). It arises because the build ID returned by HYPERVISOR_xen_version(XENVER_build_id) is not NUL-terminated, causing sprintf in buildid_show to overflow the buffer by reading beyond the intended data. The issue is fixed by replacing sprintf with memcpy to correctly handle the build ID data.