linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in inte...
CVE-2026-31782 is fixed in 19 products on 1 platform, first by DEBIAN-CVE-2026-31782, released May 15, 2026. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in intel_pmu_hw_config Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86_hybrid_pmu and a container_of operation in intel_pmu_set_acr_caused_constr (via the hybrid helper) could cause out of bound memory reads. Avoid this by guarding the call to intel_pmu_set_acr_caused_constr with an is_x86_event check.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool6.18 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| bpftool6.18-debuginfo · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel-livepatch-6.18.25-52.107 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-debuginfo · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-debuginfo-common-aarch64 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-debuginfo-common-x86_64 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-devel · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-headers · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-modules-extra · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-modules-extra-common · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-tools · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-tools-debuginfo · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| kernel6.18-tools-devel · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| linux · Debian 14 | 6.19.12-1 | DEBIAN-CVE-2026-31782 | May 15, 2026 |
| perf6.18 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| perf6.18-debuginfo · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| python3-perf6.18 · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
| python3-perf6.18-debuginfo · amzn 2023 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 | May 25, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.