CVE-2026-31761: linux Race Condition
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-31761DEBIAN-CVE-2026-31761
Published 01-05-2026Last modified 15-10-2026
Vulnerability summary
CVE-2026-31761 is a high (CVSS 7.8) Race Condition vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.1% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.14%
0%100%
Low · +0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 40 · Related 38MGASA-2026-0108MGASA-2026-0110OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1SUSE-SU-2026:23231-1SUSE-SU-2026:23237-1SUSE-SU-2026:23241-1SUSE-SU-2026:23244-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1USN-8567-1USN-8574-1USN-8574-2USN-8574-3USN-8575-1USN-8575-2USN-8575-3USN-8576-1USN-8576-2USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8610-1USN-8619-1USN-8620-1USN-8620-2USN-8620-3USN-8620-4USN-8665-1USN-8668-1USN-8668-2
Timeline
- 01-05-2026PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to correct location iio_device_register() should be at the end of the probe function to prevent race conditions. Place iio_device_register() at the end of the probe function and place iio_device_unregister() accordingly.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
+0.04 pp
From 0.10% on 21-09-2026
21-09-202621-10-2026
EPSS score0.14%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu156 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 22487ef85f6dd9499ddf49b85a08afc50a3f1992 | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < caec338f91469f0a70b68165185afa3abc994545 | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 051ca43b0e0e4b66bfd349cd53ccf231ad1d69b7 | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 2a4537653d200fda2a8516083459f8ff6194f8fc | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 92f18aa86302fe83e0726a1191015f427d4ff056 | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < cc3de12a5612ee25df7fb549cb7b3e4cc8bfaf9c | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 59a317f8215674c8330817770497301bfb2c1b99 | ≥ 3904b28efb2c780c23dcddfb87e07fe0230661e5, < 4c05799449108fb0e0a6bd30e65fffc71e60db4d | 4.10
- linux_kernel≥ 4.10, < 5.10.253 | ≥ 5.11, < 5.15.203 | ≥ 5.16, < 6.1.168 | ≥ 6.2, < 6.6.134 | ≥ 6.7, < 6.12.81 | ≥ 6.13, < 6.18.22 | ≥ 6.19, < 6.19.12 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6
Debian1 product
- linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.12-1
3 vendors · 159 products