What’s Vulnerable › Vulnerabilities

CVE-2026-31574: clockevents: Add missing resets of the next_event_forced flag

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the next_event_forced flag The prevention mechanism against timer interrupt starvation missed to reset the next_event_forced flag in a couple of places: - When the clock event state changes. That can cause the flag to be stale over a shutdown/startup sequence - When a non-forced event is armed, which then prevents rearming before that event. If that event is far out in the future this will cause missed timer interrupts. - In the suspend wakeup handler. That led to stalls which have been reported by several people. Add the missing resets, which fixes the problems for the reporters.

Affected products

• Linux kernel: 7.0

References

• https://git.kernel.org/stable/c/4096fd0e8eaea13ebe5206700b33f49635ae18e5
• https://git.kernel.org/stable/c/9401b593fa48218d2667df1610b0ebc518554880

Get alerted when CVE-2026-31574 or the next vulnerability affects your stack