HOMEVULNERABILITIESCVE-2026-31687
NONE

CVE-2026-31687

Published: April 27, 2026· Updated: Apr 27, 2026

EPSS:0.03%probability of exploitation in 30 daysPercentile:9.5th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: omap: do not register driver in probe()

Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers the

omap_mpuio_driver from omap_mpuio_init(), which is called from

omap_gpio_probe().

However, it neither makes sense to register drivers from probe()

callbacks of other drivers, nor does the driver core allow registering

drivers with a device lock already being held.

The latter was revealed by commit dc23806a7c47 ("driver core: enforce

device_lock for driver_match_device()") leading to a potential deadlock

condition described in [1].

Additionally, the omap_mpuio_driver is never unregistered from the

driver core, even if the module is unloaded.

Hence, register the omap_mpuio_driver from the module initcall and

unregister it in module_exit().

NVD Source

Technical Analysis

CVE-2026-31687 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Affected Vendors & Products

Mentioned vendors (from description):
Linux
CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

All References (11)

Quick Facts

CVE IDCVE-2026-31687
SeverityNONE
CISA KEVNo
EPSS (30d)0.03%
PublishedApr 27, 2026

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2026-31687 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.