[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31488":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":47,"related":48,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":62,"kevs":122,"epss":123,"epss_history":126,"metrics":342,"affected":350},"CVE-2026-31488","In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Do not skip unrelated mode changes in DSC validation\n\nStarting with commit 17ce8a6907f7 (\"drm/amd/display: Add dsc pre-validation in\natomic check\"), amdgpu resets the CRTC state mode_changed flag to false when\nrecomputing the DSC configuration results in no timing change for a particular\nstream.\n\nHowever, this is incorrect in scenarios where a change in MST/DSC configuration\nhappens in the same KMS commit as another (unrelated) mode change. For example,\nthe integrated panel of a laptop may be configured differently (e.g., HDR\nenabled/disabled) depending on whether external screens are attached. In this\ncase, plugging in external DP-MST screens may result in the mode_changed flag\nbeing dropped incorrectly for the integrated panel if its DSC configuration\ndid not change during precomputation in pre_validate_dsc().\n\nAt this point, however, dm_update_crtc_state() has already created new streams\nfor CRTCs with DSC-independent mode changes. In turn,\namdgpu_dm_commit_streams() will never release the old stream, resulting in a\nmemory leak. amdgpu_dm_atomic_commit_tail() will never acquire a reference to\nthe new stream either, which manifests as a use-after-free when the stream gets\ndisabled later on:\n\nBUG: KASAN: use-after-free in dc_stream_release+0x25/0x90 [amdgpu]\nWrite of size 4 at addr ffff88813d836524 by task kworker/9:9/29977\n\nWorkqueue: events drm_mode_rmfb_work_fn\nCall Trace:\n \u003CTASK>\n dump_stack_lvl+0x6e/0xa0\n print_address_description.constprop.0+0x88/0x320\n ? dc_stream_release+0x25/0x90 [amdgpu]\n print_report+0xfc/0x1ff\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __virt_addr_valid+0x225/0x4e0\n ? dc_stream_release+0x25/0x90 [amdgpu]\n kasan_report+0xe1/0x180\n ? dc_stream_release+0x25/0x90 [amdgpu]\n kasan_check_range+0x125/0x200\n dc_stream_release+0x25/0x90 [amdgpu]\n dc_state_destruct+0x14d/0x5c0 [amdgpu]\n dc_state_release.part.0+0x4e/0x130 [amdgpu]\n dm_atomic_destroy_state+0x3f/0x70 [amdgpu]\n drm_atomic_state_default_clear+0x8ee/0xf30\n ? drm_mode_object_put.part.0+0xb1/0x130\n __drm_atomic_state_free+0x15c/0x2d0\n atomic_remove_fb+0x67e/0x980\n\nSince there is no reliable way of figuring out whether a CRTC has unrelated\nmode changes pending at the time of DSC validation, remember the value of the\nmode_changed flag from before the point where a CRTC was marked as potentially\naffected by a change in DSC configuration. Reset the mode_changed flag to this\nearlier value instead in pre_validate_dsc().\n\n(cherry picked from commit cc7c7121ae082b7b82891baa7280f1ff2608f22b)",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":25,"likelihood_of_exploit":9,"capec":26},"CWE-1288","Improper Validation of Consistency within Input","The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.","Incomplete","Base",[],[],[],[],[31,33,35,37,39,41,43,45],{"_key":32},"SUSE-SU-2026:2238-1",{"_key":34},"DEBIAN-CVE-2026-31488",{"_key":36},"RHSA-2026:27353",{"_key":38},"RHSA-2026:27354",{"_key":40},"RHSA-2026:30848",{"_key":42},"UBUNTU-CVE-2026-31488",{"_key":44},"USN-8567-1",{"_key":46},"USN-8574-1",[],[49],{"_key":32},"2026-04-22T13:54:12.963Z","2026-07-22T12:08:35.529Z","Modified",{"cisa_kev":54,"cisa_ransomware":54,"cisa_vendor":9,"epss_severity":55,"epss_score":56,"severity":57,"severity_score":58,"severity_version":59,"severity_source":60,"severity_vector":61,"severity_status":52},false,"low",0.00135,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[63,69,73,77,81,85,89,95,100,105,110,114,118],{"url":64,"sources":65,"tags":67},"https://git.kernel.org/stable/c/10862e344b4d6434642a48c87d765813fc0b0ba7",[60,66],"nvd",[68],"Patch",{"url":70,"sources":71,"tags":72},"https://git.kernel.org/stable/c/8a5edc97fd9c6415ff2eff872748439a97e3c3d8",[60,66],[68],{"url":74,"sources":75,"tags":76},"https://git.kernel.org/stable/c/111208b5b7ebcdadb3f922cc52d8425f0fa91b33",[60,66],[68],{"url":78,"sources":79,"tags":80},"https://git.kernel.org/stable/c/aed3d041ab061ec8a64f50a3edda0f4db7280025",[60,66],[68],{"url":82,"sources":83,"tags":84},"https://git.kernel.org/stable/c/21159d8b335a6b9f44cbb506733013a902ae2da4",[60,66],[],{"url":86,"sources":87,"tags":88},"https://git.kernel.org/stable/c/da1d0ed31e9802fd99384f43cc63678a5a11cb41",[60,66],[],{"url":90,"sources":91,"tags":92},"https://access.redhat.com/security/cve/CVE-2026-31488",[60],[93,94],"VDB Entry","X Refsource REDHAT",{"url":96,"sources":97,"tags":98},"https://bugzilla.redhat.com/show_bug.cgi?id=2460619",[60],[99,94],"Issue Tracking",{"url":101,"sources":102,"tags":103},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31488.json",[60],[104],"X Sadp Csaf Vex",{"url":106,"sources":107,"tags":108},"https://access.redhat.com/errata/RHSA-2026:30848",[60],[109,94],"Vendor Advisory",{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:27353",[60],[109,94],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/errata/RHSA-2026:27354",[60],[109,94],{"url":119,"sources":120,"tags":121},"https://access.redhat.com/errata/RHSA-2026:43231",[60],[109,94],[],{"date":124,"score":56,"percentile":125},"2026-07-05",0.0328,[127,131,134,137,140,143,147,150,153,156,159,162,164,167,170,172,175,178,181,183,185,188,191,194,197,200,202,205,208,211,214,217,221,224,227,230,233,236,239,242,245,248,251,253,256,259,262,265,268,271,274,276,279,282,286,289,292,295,298,301,304,307,309,311,314,317,320,323,326,329,332,335,338,341],{"date":128,"score":129,"percentile":130},"2026-04-23",0.00018,0.04581,{"date":132,"score":129,"percentile":133},"2026-04-24",0.04584,{"date":135,"score":129,"percentile":136},"2026-04-25",0.04621,{"date":138,"score":129,"percentile":139},"2026-04-26",0.0462,{"date":141,"score":129,"percentile":142},"2026-04-27",0.04608,{"date":144,"score":145,"percentile":146},"2026-04-28",0.00013,0.02363,{"date":148,"score":145,"percentile":149},"2026-04-29",0.02379,{"date":151,"score":145,"percentile":152},"2026-04-30",0.02382,{"date":154,"score":145,"percentile":155},"2026-05-01",0.02378,{"date":157,"score":145,"percentile":158},"2026-05-02",0.02364,{"date":160,"score":145,"percentile":161},"2026-05-03",0.02369,{"date":163,"score":145,"percentile":146},"2026-05-04",{"date":165,"score":145,"percentile":166},"2026-05-05",0.02353,{"date":168,"score":145,"percentile":169},"2026-05-06",0.02344,{"date":171,"score":145,"percentile":146},"2026-05-07",{"date":173,"score":145,"percentile":174},"2026-05-08",0.02376,{"date":176,"score":145,"percentile":177},"2026-05-09",0.02403,{"date":179,"score":145,"percentile":180},"2026-05-10",0.02399,{"date":182,"score":145,"percentile":180},"2026-05-11",{"date":184,"score":145,"percentile":180},"2026-05-12",{"date":186,"score":145,"percentile":187},"2026-05-13",0.02411,{"date":189,"score":145,"percentile":190},"2026-05-14",0.02424,{"date":192,"score":145,"percentile":193},"2026-05-15",0.02432,{"date":195,"score":145,"percentile":196},"2026-05-16",0.02446,{"date":198,"score":145,"percentile":199},"2026-05-17",0.02443,{"date":201,"score":145,"percentile":190},"2026-05-18",{"date":203,"score":145,"percentile":204},"2026-05-19",0.0241,{"date":206,"score":145,"percentile":207},"2026-05-20",0.02406,{"date":209,"score":145,"percentile":210},"2026-05-21",0.02389,{"date":212,"score":145,"percentile":213},"2026-05-22",0.02535,{"date":215,"score":145,"percentile":216},"2026-05-23",0.02529,{"date":218,"score":219,"percentile":220},"2026-05-24",0.00015,0.03619,{"date":222,"score":219,"percentile":223},"2026-05-25",0.03595,{"date":225,"score":219,"percentile":226},"2026-05-26",0.03579,{"date":228,"score":219,"percentile":229},"2026-05-27",0.03606,{"date":231,"score":219,"percentile":232},"2026-05-28",0.03581,{"date":234,"score":219,"percentile":235},"2026-05-29",0.03593,{"date":237,"score":219,"percentile":238},"2026-05-30",0.03616,{"date":240,"score":219,"percentile":241},"2026-05-31",0.03602,{"date":243,"score":219,"percentile":244},"2026-06-01",0.03541,{"date":246,"score":219,"percentile":247},"2026-06-02",0.03562,{"date":249,"score":219,"percentile":250},"2026-06-03",0.0355,{"date":252,"score":219,"percentile":250},"2026-06-04",{"date":254,"score":219,"percentile":255},"2026-06-05",0.03556,{"date":257,"score":219,"percentile":258},"2026-06-06",0.0357,{"date":260,"score":219,"percentile":261},"2026-06-07",0.03561,{"date":263,"score":219,"percentile":264},"2026-06-08",0.0354,{"date":266,"score":219,"percentile":267},"2026-06-09",0.03548,{"date":269,"score":219,"percentile":270},"2026-06-10",0.03539,{"date":272,"score":219,"percentile":273},"2026-06-11",0.03566,{"date":275,"score":219,"percentile":232},"2026-06-12",{"date":277,"score":219,"percentile":278},"2026-06-13",0.03571,{"date":280,"score":219,"percentile":281},"2026-06-14",0.03586,{"date":283,"score":284,"percentile":285},"2026-06-15",0.00126,0.0256,{"date":287,"score":284,"percentile":288},"2026-06-16",0.02566,{"date":290,"score":284,"percentile":291},"2026-06-17",0.02573,{"date":293,"score":284,"percentile":294},"2026-06-18",0.02572,{"date":296,"score":284,"percentile":297},"2026-06-19",0.02568,{"date":299,"score":284,"percentile":300},"2026-06-20",0.02567,{"date":302,"score":284,"percentile":303},"2026-06-21",0.02565,{"date":305,"score":284,"percentile":306},"2026-06-22",0.02559,{"date":308,"score":284,"percentile":303},"2026-06-23",{"date":310,"score":284,"percentile":300},"2026-06-24",{"date":312,"score":284,"percentile":313},"2026-06-25",0.0258,{"date":315,"score":284,"percentile":316},"2026-06-26",0.02588,{"date":318,"score":284,"percentile":319},"2026-06-27",0.02593,{"date":321,"score":284,"percentile":322},"2026-06-28",0.02601,{"date":324,"score":284,"percentile":325},"2026-06-29",0.026,{"date":327,"score":56,"percentile":328},"2026-06-30",0.0329,{"date":330,"score":56,"percentile":331},"2026-07-01",0.03294,{"date":333,"score":56,"percentile":334},"2026-07-02",0.03284,{"date":336,"score":56,"percentile":337},"2026-07-03",0.03277,{"date":339,"score":56,"percentile":340},"2026-07-04",0.03278,{"date":124,"score":56,"percentile":125},[343,348],{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":344,"cvss_v4_0":9},{"baseScore":58,"baseSeverity":345,"vectorString":61,"impactScore":346,"exploitabilityScore":347},"HIGH",9.8,4.6,{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":349,"cvss_v4_0":9},{"baseScore":58,"baseSeverity":345,"vectorString":61,"impactScore":346,"exploitabilityScore":347},[351,380],{"ecosystem":9,"name":352,"vendor":353,"product":353,"cpe_part":354,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":355},"Linux","linux","a",[356,363,366,369,372,375,378],{"version":357,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":361,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C da1d0ed31e9802fd99384f43cc63678a5a11cb41",true,"17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b","including","da1d0ed31e9802fd99384f43cc63678a5a11cb41","excluding",{"version":364,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":365,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C 21159d8b335a6b9f44cbb506733013a902ae2da4","21159d8b335a6b9f44cbb506733013a902ae2da4",{"version":367,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":368,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C 10862e344b4d6434642a48c87d765813fc0b0ba7","10862e344b4d6434642a48c87d765813fc0b0ba7",{"version":370,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":371,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C 8a5edc97fd9c6415ff2eff872748439a97e3c3d8","8a5edc97fd9c6415ff2eff872748439a97e3c3d8",{"version":373,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":374,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C 111208b5b7ebcdadb3f922cc52d8425f0fa91b33","111208b5b7ebcdadb3f922cc52d8425f0fa91b33",{"version":376,"is_range":358,"range_type":60,"version_start":359,"version_start_type":360,"version_end":377,"version_end_type":362,"fixed_in":9},">= 17ce8a6907f77b7ac97ddaa071d8a1f6e06ce85b, \u003C aed3d041ab061ec8a64f50a3edda0f4db7280025","aed3d041ab061ec8a64f50a3edda0f4db7280025",{"version":379,"is_range":54,"range_type":60,"version_start":379,"version_start_type":360,"version_end":379,"version_end_type":360,"fixed_in":9},"5.18",{"ecosystem":9,"name":381,"vendor":353,"product":382,"cpe_part":354,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":383},"Linux Kernel","linux kernel",[384,389,393,397,398,400,402,404,406,408,410],{"version":385,"is_range":358,"range_type":386,"version_start":387,"version_start_type":360,"version_end":388,"version_end_type":362,"fixed_in":9},"gte5.18.1_lt6.12.80","cpe","5.18.1","6.12.80",{"version":390,"is_range":358,"range_type":386,"version_start":391,"version_start_type":360,"version_end":392,"version_end_type":362,"fixed_in":9},"gte6.13_lt6.18.21","6.13","6.18.21",{"version":394,"is_range":358,"range_type":386,"version_start":395,"version_start_type":360,"version_end":396,"version_end_type":362,"fixed_in":9},"gte6.19_lt6.19.11","6.19","6.19.11",{"version":379,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":399,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":401,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":403,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":405,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":407,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":409,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":411,"is_range":54,"range_type":386,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]