Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2026-31488

7.8 · HIGH
Published Apr 22, 2026 linux CWE-416

Overview

CVE-2026-31488 is a high-severity vulnerability affecting linux linux_kernel. It was published on April 22, 2026 and has a CVSS 3.1 base score of 7.8 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Do not skip unrelated mode changes in DSC validation

Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in

atomic check"), amdgpu resets the CRTC state mode_changed flag to false when

recomputing the DSC configuration results in no timing change for a particular

stream.

However, this is incorrect in scenarios where a change in MST/DSC configuration

happens in the same KMS commit as another (unrelated) mode change. For example,

the integrated panel of a laptop may be configured differently (e.g., HDR

enabled/disabled) depending on whether external screens are attached. In this

case, plugging in external DP-MST screens may result in the mode_changed flag

being dropped incorrectly for the integrated panel if its DSC configuration

did not change during precomputation in pre_validate_dsc().

At this point, however, dm_update_crtc_state() has already created new streams

for CRTCs

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status
linux linux_kernel >= 5.18.1, < 6.12.80 Affected

Frequently Asked Questions

What is CVE-2026-31488?

CVE-2026-31488 is a high-severity vulnerability affecting linux linux_kernel. It was published on April 22, 2026 and has a CVSS 3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-31488?

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2026-31488?

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-31488?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-31488 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

Browse by year 2026