CVE-2026-31782 perf/x86: Fix potential bad container_of in intel_pmu_hw_config
A bad container_of operation in the Linux kernel's Intel PMU code can cause out-of-bounds memory reads, potentially leading to crashes or information leaks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-31782?
CVE-2026-31782 is a high-severity memory corruption vulnerability in Linux kernel, published on 1 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
perf/x86: Fix potential bad container_of in intel_pmu_hw_config
Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86_hybrid_pmu and a container_of operation in intel_pmu_set_acr_caused_constr (via the hybrid helper) could cause out of bound memory reads. Avoid this by guarding the call to intel_pmu_set_acr_caused_constr with an is_x86_event check.
Weakness: CWE-125
Which versions are affected by CVE-2026-31782?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-31782?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-31782 being exploited?
There is no known exploitation of CVE-2026-31782 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-31782, DEBIAN-CVE-2026-31782, GHSA-w3g4-6g98-pjqr, UBUNTU-CVE-2026-31782.