{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31628", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.124Z", "datePublished": "2026-04-24T14:42:49.181Z", "dateUpdated": "2026-07-14T12:48:24.759Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:43:19.462Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU: Fix FPDSS on Zen1\n\nZen1's hardware divider can leave, under certain circumstances, partial\nresults from previous operations. Those results can be leaked by\nanother, attacker thread.\n\nFix that with a chicken bit."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/include/asm/msr-index.h", "arch/x86/kernel/cpu/amd.c"], "versions": [{"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "ed7a3a246309ccc807238f1b4f159ee6d37ff9c4", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "0548529af20e68c6552817834b766646dd3bd7a7", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "1272cfedf4cd1019ddf583917a99b62f2d3645bb", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "91f02726b2203b71545713ecb7fb006e60a2d66f", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "b731aca06387b195058a9f6449a03b62efa1bd10", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "ad17f07e95e6e8505e2153e5b391f0d27eacce25", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "e6af5286efe5a56128b34032572c9ce9ebeccda3", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "546785c719418c6166834a47e372a88f5f7ae893", "status": "affected", "versionType": "git"}, {"version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "lessThan": "e55d98e7756135f32150b9b8f75d580d0d4b2dd3", "status": "affected", "versionType": "git"}, {"version": "5abd1583e06b3963e5c9d915760367de86808b78", "status": "affected", "versionType": "git"}, {"version": "4ba461d426490b6ed7e8298c4d3b7a13aa5d2686", "status": "affected", "versionType": "git"}, {"version": "5a63725cd18fcee2af6ec46ccb856b64ad3077b4", "status": "affected", "versionType": "git"}, {"version": "3.16.58", "lessThan": "3.17", "status": "affected", "versionType": "semver"}, {"version": "4.4.144", "lessThan": "4.5", "status": "affected", "versionType": "semver"}, {"version": "4.9.102", "lessThan": "4.10", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/include/asm/msr-index.h", "arch/x86/kernel/cpu/amd.c"], "versions": [{"version": "4.14", "status": "affected"}, {"version": "0", "lessThan": "4.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.169", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.135", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.82", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.23", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.13", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.1", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.1.169"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.6.135"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.12.82"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.18.23"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.19.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "7.0.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16.58"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.144"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9.102"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ed7a3a246309ccc807238f1b4f159ee6d37ff9c4"}, {"url": "https://git.kernel.org/stable/c/0548529af20e68c6552817834b766646dd3bd7a7"}, {"url": "https://git.kernel.org/stable/c/1272cfedf4cd1019ddf583917a99b62f2d3645bb"}, {"url": "https://git.kernel.org/stable/c/91f02726b2203b71545713ecb7fb006e60a2d66f"}, {"url": "https://git.kernel.org/stable/c/b731aca06387b195058a9f6449a03b62efa1bd10"}, {"url": "https://git.kernel.org/stable/c/ad17f07e95e6e8505e2153e5b391f0d27eacce25"}, {"url": "https://git.kernel.org/stable/c/e6af5286efe5a56128b34032572c9ce9ebeccda3"}, {"url": "https://git.kernel.org/stable/c/546785c719418c6166834a47e372a88f5f7ae893"}, {"url": "https://git.kernel.org/stable/c/e55d98e7756135f32150b9b8f75d580d0d4b2dd3"}], "title": "x86/CPU: Fix FPDSS on Zen1", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"x_adpType": "supplier", "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-07-14T12:48:24.759Z"}, "affected": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}]}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/x86/include/asm/msr-index.h", "arch/x86/kernel/cpu/amd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "ed7a3a246309ccc807238f1b4f159ee6d37ff9c4", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "0548529af20e68c6552817834b766646dd3bd7a7", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "1272cfedf4cd1019ddf583917a99b62f2d3645bb", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "91f02726b2203b71545713ecb7fb006e60a2d66f", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "b731aca06387b195058a9f6449a03b62efa1bd10", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "ad17f07e95e6e8505e2153e5b391f0d27eacce25", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "e6af5286efe5a56128b34032572c9ce9ebeccda3", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "546785c719418c6166834a47e372a88f5f7ae893", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"lessThan": "e55d98e7756135f32150b9b8f75d580d0d4b2dd3", "status": "affected", "version": "f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9", "versionType": "git"}, {"status": "affected", "version": "5abd1583e06b3963e5c9d915760367de86808b78", "versionType": "git"}, {"status": "affected", "version": "4ba461d426490b6ed7e8298c4d3b7a13aa5d2686", "versionType": "git"}, {"status": "affected", "version": "5a63725cd18fcee2af6ec46ccb856b64ad3077b4", "versionType": "git"}, {"lessThan": "3.17", "status": "affected", "version": "3.16.58", "versionType": "semver"}, {"lessThan": "4.5", "status": "affected", "version": "4.4.144", "versionType": "semver"}, {"lessThan": "4.10", "status": "affected", "version": "4.9.102", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/x86/include/asm/msr-index.h", "arch/x86/kernel/cpu/amd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.14"}, {"lessThan": "4.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.169", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.135", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.82", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.23", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.13", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.1", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C1981AEB-4867-4AB9-8168-BAB8D6567131", "versionEndExcluding": "3.17", "versionStartIncluding": "3.16.58", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E307C3F-E33B-4061-B210-F031D88F5C6E", "versionEndExcluding": "4.5", "versionStartIncluding": "4.4.144", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "96373A7C-EBC6-4D06-941C-481E7B24579D", "versionEndExcluding": "4.10", "versionStartIncluding": "4.9.102", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FC7EE9-71F9-4ACC-9566-0299D47F2B4A", "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.14.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBEC0E5D-641C-4E98-A6D9-5799B10CE451", "versionEndExcluding": "6.1.169", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "15C1A1B2-14EE-494C-AF3E-D5A7BA640B39", "versionEndExcluding": "6.6.135", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "02904CAE-71D2-45B3-9EC3-F6A9D18B6307", "versionEndExcluding": "6.12.82", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9E09FDD-9EE3-4A56-92E2-2B30AFD0072F", "versionEndExcluding": "6.18.23", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "1490EF9B-9080-481C-8D22-1306AAE664E4", "versionEndExcluding": "6.19.13", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B5888AB-7403-4335-89E4-21CC0B48366A", "versionEndExcluding": "7.0.1", "versionStartIncluding": "7.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.14:-:*:*:*:*:*:*", "matchCriteriaId": "7875AA30-1F6F-470C-A52D-ECBD6663CEC5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU: Fix FPDSS on Zen1\n\nZen1's hardware divider can leave, under certain circumstances, partial\nresults from previous operations. Those results can be leaked by\nanother, attacker thread.\n\nFix that with a chicken bit."}], "id": "CVE-2026-31628", "lastModified": "2026-06-17T10:34:07.320", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-04-24T15:16:42.103", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0548529af20e68c6552817834b766646dd3bd7a7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1272cfedf4cd1019ddf583917a99b62f2d3645bb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/546785c719418c6166834a47e372a88f5f7ae893"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91f02726b2203b71545713ecb7fb006e60a2d66f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ad17f07e95e6e8505e2153e5b391f0d27eacce25"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b731aca06387b195058a9f6449a03b62efa1bd10"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e55d98e7756135f32150b9b8f75d580d0d4b2dd3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e6af5286efe5a56128b34032572c9ce9ebeccda3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ed7a3a246309ccc807238f1b4f159ee6d37ff9c4"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: x86/CPU: Fix FPDSS on Zen1", "id": "2461569", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461569"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-212", "details": ["A flaw was found in the Linux kernel. On systems utilizing Zen1 processors, the hardware divider can, under specific conditions, retain partial results from prior operations. A local attacker can exploit this vulnerability to access these residual results, leading to information disclosure."], "name": "CVE-2026-31628", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31628\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31628\nhttps://lore.kernel.org/linux-cve-announce/2026042428-CVE-2026-31628-8187@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,ed7a3a246309ccc807238f1b4f159ee6d37ff9c4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,0548529af20e68c6552817834b766646dd3bd7a7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,1272cfedf4cd1019ddf583917a99b62f2d3645bb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,91f02726b2203b71545713ecb7fb006e60a2d66f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,b731aca06387b195058a9f6449a03b62efa1bd10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,ad17f07e95e6e8505e2153e5b391f0d27eacce25)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,e6af5286efe5a56128b34032572c9ce9ebeccda3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,546785c719418c6166834a47e372a88f5f7ae893)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f7f3dc00f61261cdc9ccd8b886f21bc4dffd6fd9,e55d98e7756135f32150b9b8f75d580d0d4b2dd3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "5abd1583e06b3963e5c9d915760367de86808b78"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "4ba461d426490b6ed7e8298c4d3b7a13aa5d2686"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "5a63725cd18fcee2af6ec46ccb856b64ad3077b4"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.169,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.135,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.82,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.23,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.13,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.1,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-28T13:55:49.219790+00:00", "value": {"mitigation_remediation": ["Upgrade the Linux kernel to a release that includes the FPDSS fix for Zen1 CPUs.", "Reboot systems so that the updated kernel is loaded and the CPU divider correction is active.", "If kernel upgrades cannot be performed immediately, consider disabling or removing Zen1 CPUs from the hardware configuration to eliminate the source of partial result leakage."], "summary": {"action": "Apply Update", "impact": "Local Information Disclosure"}, "threat_synthesis": {"affected_systems": "All Linux kernel versions before the commit that introduced the fix for Zen1 CPUs are affected. The affected products are Linux kernels running on systems with Zen1 CPUs. Specific kernel versions are not enumerated in the advisory; any version prior to the patch is considered vulnerable.", "description_and_impact": "The vulnerability involves Zen1 CPUs, where the hardware divider can leave partial results from previous operations in its state register. Under certain circumstances an attacker thread can read these partial results, leaking sensitive information from other threads. The weakness is an instance of information exposure through partial data (CWE-212). Additionally, NVD lists no further CWE information (marked NVD-CWE-noinfo). The primary impact is the disclosure of memory contents to a local attacker running a competing thread.", "risk_and_exploitability": "The CVSS score of 5.5 indicates a moderate risk. The EPSS score is below 1%, showing a very low exploitation probability in the current threat landscape. The vulnerability is not listed in the CISA KEV catalog. Because the flaw depends on leaking data from a CPU divider, the attack vector is local and requires an attacker thread running on the same system with access to the CPU. No remote or privilege escalation mechanisms are described."}}}}, "created": "2026-04-27T18:45:11.326584+00:00", "updated": "2026-04-28T14:00:16.507006+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}