Memory Handling Vulnerability in Linux Kernel for Raspberry Pi Devices

CVE-2026-31494

What is CVE-2026-31494?

A vulnerability in the Linux kernel affects Raspberry Pi devices where an out-of-bounds write can occur due to improper handling of memory for network statistics. Specifically, the functions gem_get_sset_count and gem_get_ethtool_stats do not align on how they determine active queue counts. As a result, this mismatch can lead to attempts to write beyond allocated memory, potentially exposing the device to instability or exploitation. A fix has been implemented to ensure that the size of the data copied corresponds to the number of actively used queues, thereby protecting against unauthorized memory access.

References