UBUNTU-CVE-2026-31574

    Dashboard / Vulnerabilities / UBUNTU-CVE-2026-31574

    UBUNTU-CVE-2026-31574

    Published: 24 Apr 2026Last Modified: 9 Sept 2026
    Upstream:
    CVE-2026-31574
    Aliases:
    USN-8488-1
    USN-8488-2
    USN-8507-1

    Summary:

    Details: In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the next_event_forced flag The prevention mechanism against timer interrupt starvation missed to reset the next_event_forced flag in a couple of places: - When the clock event state changes. That can cause the flag to be stale over a shutdown/startup sequence - When a non-forced event is armed, which then prevents rearming before that event. If that event is far out in the future this will cause missed timer interrupts. - In the suspend wakeup handler. That led to stalls which have been reported by several people. Add the missing resets, which fixes the problems for the reporters.

    References: https://ubuntu.com/security/CVE-2026-31574, https://www.cve.org/CVERecord?id=CVE-2026-31574, https://git.kernel.org/linus/4096fd0e8eaea13ebe5206700b33f49635ae18e5, https://ubuntu.com/security/notices/USN-8488-1, https://ubuntu.com/security/notices/USN-8488-2, https://ubuntu.com/security/notices/USN-8507-1, https://ubuntu.com/security/notices/USN-8569-1, https://ubuntu.com/security/notices/USN-8603-1

    Affected packages

    Package

    Name: linux-hwe-edge

    Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    4.8.0-28.30~16.04.1
    4.8.0-30.32~16.04.1
    4.8.0-32.34~16.04.1
    4.8.0-34.36~16.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2026-31574 | CVE-DB