Vulnerability in Linux

CVE-2026-31523

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue maps, which would race with the now interrupt driven queue and may cause double completions.

Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)

Published · last modified .

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.001 (1.2th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-31523: held from 0.001 to 0.001.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: +0.000

Affected products

  • Linux — versions 4b04cc6a8f86c4842314def22332de1f15de8523, 5.0, 0
  • Linux Kernel — versions 7.0

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-31523?
CVE-2026-31523 is a medium-severity vulnerability in Linux, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 4.7/10. Published 2026-04-22.
How severe is CVE-2026-31523?
Medium severity. CVSS v3 base score is 4.7 out of 10.