Vulnerability · Published Apr 24, 2026 · Assigned by Linux
CVE-2026-31554futex: Require sys_futex_requeue() to have identical flags
High 7.8
In plain English
A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 88.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sys_futex_requeue() is used with different flags. The initial motivation for allowing different flags was the variable sized futex, but since that hasn't been merged (yet), simply mandate the flags are identical, as is the case for the old style sys_futex() requeue operations.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | kernel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-doc | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-headers | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-tools | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-uki-virt-addons | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | libperf | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | perf | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | python3-perf | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | rtla | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| AlmaLinux:9 | rv | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
| Debian:13 | linux | 6.12.85-1 | DEBIAN-CVE-2026-31554 |
| Debian:14 | linux | 6.19.11-1 | DEBIAN-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux | 6.8.0-136.136 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1061.64 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-aws | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-aws-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1063.71 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-azure | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1063.71~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-fde | 6.8.0-1062.69 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | 6.8.0-1062.69~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-azure-nvidia-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1064.72 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-gcp | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gcp-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1059.67 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1046.50 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-hwe-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1061.62 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-136.136.2 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-136.136.2~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1059.62 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-nvidia-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1059.62~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1059.62.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1030.31 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oem-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1058.61 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-oracle | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-oracle-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1058.61~22.04.1 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1061.65 | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-raspi | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-realtime | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:25.10 | linux-riscv | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-riscv-6.17 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-136.136~22.04.3 | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-vmware | 6.8.0-1008.8 | UBUNTU-CVE-2026-31554 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1033.34 | UBUNTU-CVE-2026-31554 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 0f4b5f972216782a4acb1ae00dcb55173847c2ff – before 027145ace09fad4c7cbcd6c61fe9b429c63eb0e50f4b5f972216782a4acb1ae00dcb55173847c2ff – before 18b7d09c2b794c71d4252f3ea2cf84ad12b73d6a0f4b5f972216782a4acb1ae00dcb55173847c2ff – before e2f78c7ec1655fedd945366151ba54fcb95805080f4b5f972216782a4acb1ae00dcb55173847c2ff – before 19f94b39058681dec64a10ebeb6f23fe7fc3f77a |
| Linux | Linux | 6.7 |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H