{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-31599",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-31599",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-04-24T14:42:23.961Z",
    "updatedAt": "2026-06-14T17:42:40.045Z",
    "importedAt": "2026-10-24T01:58:02.025Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections\n\nsyzbot reported a general protection fault in vidtv_psi_desc_assign [1].\n\nvidtv_psi_pmt_stream_init() can return NULL on memory allocation\nfailure, but vidtv_channel_pmt_match_sections() does not check for\nthis. When tail is NULL, the subsequent call to\nvidtv_psi_desc_assign(&tail->descriptor, desc) dereferences a NULL\npointer offset, causing a general protection fault.\n\nAdd a NULL check after vidtv_psi_pmt_stream_init(). On failure, clean\nup the already-allocated stream chain and return.\n\n[1]\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nRIP: 0010:vidtv_psi_desc_assign+0x24/0x90 drivers/media/test-drivers/vidtv/vidtv_psi.c:629\nCall Trace:\n <TASK>\n vidtv_channel_pmt_match_sections drivers/media/test-drivers/vidtv/vidtv_channel.c:349 [inline]\n vidtv_channel_si_init+0x1445/0x1a50 drivers/media/test-drivers/vidtv/vidtv_channel.c:479\n vidtv_mux_init+0x526/0xbe0 drivers/media/test-drivers/vidtv/vidtv_mux.c:519\n vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline]\n vidtv_start_feed+0x33e/0x4d0 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "54e18a23e62e81b8335cec3e8e9c5cb33fd88665"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5c986b77200b5ea754ba6636deacc7e0942fec9b"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "93d9e747a9e8a5ca9e3c5e37dcff76b40399139f"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b7efb4c94797c504a1c678edb48c2aa311d3309f"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e589de36da106ef739ba98f66f5a5c2023370706"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2dff11fb5098ae453651f8f77e94ad499c078022"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b832cfd516b8504e95884622cee60bf9a39b7945"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "07c1e474cf9acf777f09d14a8f8dfcef5b84e46f"
            },
            {
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f8e1fc918a9fe67103bcda01d20d745f264d00a7"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.10",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.10"
            },
            {
              "version": "5.10.258",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.209",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.175",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.136",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.83",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.24",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "6.19.14",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.19.*"
            },
            {
              "version": "7.0.1",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}