---
cve: "CVE-2026-31574"
severity: "LOW"
cvss: 3.1
epss: "11%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-04-24 15:16:32"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T23:09:16+02:00"
---

# CVE-2026-31574

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

clockevents: Add missing resets of the next_event_forced flag

The prevention mechanism against timer interrupt starvation missed to reset
the next_event_forced flag in a couple of places:

    - When the clock event state changes. That can cause the flag to be
      stale over a shutdown/startup sequence

    - When a non-forced event is armed, which then prevents rearming before
      that event. If that event is far out in the future this will cause
      missed timer interrupts.

    - In the suspend wakeup handler.

That led to stalls which have been reported by several people.

Add the missing resets, which fixes the problems for the reporters.

## Patch verfügbar (OSV)

- Kernel ≥ 7.0.1

## Referenzen

- <https://git.kernel.org/stable/c/9401b593fa48218d2667df1610b0ebc518554880>
- <https://git.kernel.org/stable/c/4096fd0e8eaea13ebe5206700b33f49635ae18e5>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-31574) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_