Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-31687— gpio: omap: do not register driver in probe()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于omap_gpio_probe函数中注册omap_mpuio_driver驱动程序，可能导致潜在死锁。

AI Predicted 3.3 Difficulty: Theoretical EPSS 0.13% · P2

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 28

VendorProduct Version RangeStatus
Linux Linux 11a78b7944963a8b052be46108d07a3ced9e2762< 57bcd3feffa79544c73a1a1872472389a391cc79 affected
11a78b7944963a8b052be46108d07a3ced9e2762< 86588916e1887a5edb8a9161cd7ae81e47a7ed25 affected
11a78b7944963a8b052be46108d07a3ced9e2762< a29215961d833f4de33a09c3964d31ebc6083033 affected
11a78b7944963a8b052be46108d07a3ced9e2762< 1c04c3a4de8d4bcb9202f94c44f26c57c2572308 affected
adc1796eced46b48e23ec200a219d635f33a38ee< 673dafb9a86349a12a93151fd467625614dc7e12 affected
11a78b7944963a8b052be46108d07a3ced9e2762< 2211d77892913804d16c28c7415b82804ab1e54c affected
cd0e0a76e40c2e77bcfc88291d00dca22b00158e< a7fa9460b86f810913b6779461d0448e7c11214c affected
11a78b7944963a8b052be46108d07a3ced9e2762< 32f08c3ddd6dda6cbb6c9d715de10f21dccde50f affected
… +20 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-31687

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
gpio: omap: do not register driver in probe()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe() Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers the omap_mpuio_driver from omap_mpuio_init(), which is called from omap_gpio_probe(). However, it neither makes sense to register drivers from probe() callbacks of other drivers, nor does the driver core allow registering drivers with a device lock already being held. The latter was revealed by commit dc23806a7c47 ("driver core: enforce device_lock for driver_match_device()") leading to a potential deadlock condition described in [1]. Additionally, the omap_mpuio_driver is never unregistered from the driver core, even if the module is unloaded. Hence, register the omap_mpuio_driver from the module initcall and unregister it in module_exit().
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于omap_gpio_probe函数中注册omap_mpuio_driver驱动程序，可能导致潜在死锁。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 11a78b7944963a8b052be46108d07a3ced9e2762 ~ 57bcd3feffa79544c73a1a1872472389a391cc79 -
Linux Linux 2.6.22 -

II. Public POCs for CVE-2026-31687

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31687

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-31687 (11)

Same Patch Batch · Linux · 2026-04-27 · 5 CVEs total

CVE-2026-31686 mm/kasan: fix double free for kasan pXds
CVE-2026-31689 EDAC/mc: Fix error path ordering in edac_mc_alloc()
CVE-2026-31690 firmware: thead: Fix buffer overflow and use standard endian macros
CVE-2026-31691 igb: remove napi_synchronize() in igb_down()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31687

No comments yet

Leave a comment