CVE-2026-31781

drm/ioc32: stop speculation on the drm_compat_ioctl path

published May 1, 2026

CVSS
—
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/ioc32: stop speculation on the drm_compat_ioctl path

The drm compat ioctl path takes a user controlled pointer, and then

dereferences it into a table of function pointers, the signature method

of spectre problems. Fix this up by calling array_index_nospec() on the

index to the function pointer list.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2026-05-01T14:15Z
EPSS history
Timeline
  • 01 MAY 14:15Z
    drm/ioc32: stop speculation on the drm_compat_ioctl path
    cvelistv5