{"answers":{"affected":"It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-31563 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-31563 is a high-severity denial of service vulnerability in Linux kernel, published on 24 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-31563 and fix it if it is affected.\n\nWhat it is: CVE-2026-31563 is a high-severity denial of service vulnerability in Linux kernel, published on 24 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-31563 in the wild and no public exploit code.\n\nAffected product: Linux kernel. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-31563/ (Markdown: https://insights.sbomify.com/CVE-2026-31563/index.md)","id":"CVE-2026-31563","markdown":"https://insights.sbomify.com/CVE-2026-31563/index.md","name":"CVE-2026-31563","record":{"aliases":["AZL-84575","BELL-CVE-2026-31563","DEBIAN-CVE-2026-31563","GHSA-fp5j-cvvc-rp28","ROOT-OS-DEBIAN-12-CVE-2026-31563","ROOT-OS-UBUNTU-2404-CVE-2026-31563","UBUNTU-CVE-2026-31563"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Linux kernel driver","requires_auth":"none","summary":"A kernel warning triggered by improper SKB freeing in the macb network driver can lead to system instability or denial of service.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[{"product":"linux_kernel","vendor":"linux"}],"cvss":{"score":7.5,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: Use dev_consume_skb_any() to free TX SKBs\n\nThe napi_consume_skb() function is not intended to be called in an IRQ\ndisabled context. However, after commit 6bc8a5098bf4 (\"net: macb: Fix\ntx_ptr_lock locking\"), the freeing of TX SKBs is performed with IRQs\ndisabled. To resolve the following call trace, use dev_consume_skb_any()\nfor freeing TX SKBs:\n   WARNING: kernel/softirq.c:430 at __local_bh_enable_ip+0x174/0x188, CPU#0: ksoftirqd/0/15\n   Modules linked in:\n   CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 7.0.0-rc4-next-20260319-yocto-standard-dirty #37 PREEMPT\n   Hardware name: ZynqMP ZCU102 Rev1.1 (DT)\n   pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n   pc : __local_bh_enable_ip+0x174/0x188\n   lr : local_bh_enable+0x24/0x38\n   sp : ffff800082b3bb10\n   x29: ffff800082b3bb10 x28: ffff0008031f3c00 x27: 000000000011ede0\n   x26: ffff000800a7ff00 x25: ffff800083937ce8 x24: 0000000000017a80\n   x23: ffff000803243a78 x22: 0000000000000040 x21: 0000000000000000\n   x20: ffff000800394c80 x19: 0000000000000200 x18: 0000000000000001\n   x17: 0000000000000001 x16: ffff000803240000 x15: 0000000000000000\n   x14: ffffffffffffffff x13: 0000000000000028 x12: ffff000800395650\n   x11: ffff8000821d1528 x10: ffff800081c2bc08 x9 : ffff800081c1e258\n   x8 : 0000000100000301 x7 : ffff8000810426ec x6 : 0000000000000000\n   x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000\n   x2 : 0000000000000008 x1 : 0000000000000200 x0 : ffff8000810428dc\n   Call trace:\n    __local_bh_enable_ip+0x174/0x188 (P)\n    local_bh_enable+0x24/0x38\n    skb_attempt_defer_free+0x190/0x1d8\n    napi_consume_skb+0x58/0x108\n    macb_tx_poll+0x1a4/0x558\n    __napi_poll+0x50/0x198\n    net_rx_action+0x1f4/0x3d8\n    handle_softirqs+0x16c/0x560\n    run_ksoftirqd+0x44/0x80\n    smpboot_thread_fn+0x1d8/0x338\n    kthread+0x120/0x150\n    ret_from_fork+0x10/0x20\n   irq event stamp: 29751\n   hardirqs last  enabled at (29750): [\u003cffff8000813be184\u003e] _raw_spin_unlock_irqrestore+0x44/0x88\n   hardirqs last disabled at (29751): [\u003cffff8000813bdf60\u003e] _raw_spin_lock_irqsave+0x38/0x98\n   softirqs last  enabled at (29150): [\u003cffff8000800f1aec\u003e] handle_softirqs+0x504/0x560\n   softirqs last disabled at (29153): [\u003cffff8000800f2fec\u003e] run_ksoftirqd+0x44/0x80","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"net: macb: Use dev_consume_skb_any() to free TX SKBs","id":"CVE-2026-31563","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"linux:linux_kernel","products":["linux:linux_kernel"],"type":"denial_of_service","year":"2026"},"n_packages":0,"n_references":6,"next":{"headline":"LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()","id":"CVE-2026-31564"},"packages":[],"prev":{"headline":"drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register","id":"CVE-2026-31562"},"products":["Linux"],"published":"2026-04-24","related":[{"cvss_score":8.8,"headline":"Linux Kernel Out-of-Bounds Write","id":"CVE-2026-53266","kev_date_added":"2026-09-18","published":"2026-06-25"},{"cvss_score":8.8,"headline":"Linux Kernel Improper Input Validation","id":"CVE-2013-6282","kev_date_added":"2022-09-15","published":"2013-11-19"},{"cvss_score":8.4,"headline":"Linux Kernel Heap-Based Buffer Overflow","id":"CVE-2022-0185","kev_date_added":"2024-08-21","published":"2022-02-11"},{"cvss_score":8.4,"headline":"Linux Kernel Privilege Escalation","id":"CVE-2013-2094","kev_date_added":"2022-09-15","published":"2013-05-14"},{"cvss_score":7.8,"headline":"Linux Kernel Unspecified","id":"CVE-2026-53362","kev_date_added":"2026-08-27","published":"2026-07-04"},{"cvss_score":7.8,"headline":"Linux Kernel Missing Initialization of a Variable","id":"CVE-2026-46300","kev_date_added":"2026-10-28","published":"2026-05-23"},{"cvss_score":7.8,"headline":"Linux Kernel Race Condition","id":"CVE-2025-39964","kev_date_added":"2026-09-18","published":"2025-10-13"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-10-15","vendors":["Linux"]},"summary":"A kernel warning triggered by improper SKB freeing in the macb network driver can lead to system instability or denial of service.","url":"https://insights.sbomify.com/CVE-2026-31563/"}