CVE-2026-31574None▾ Sunlit

clockevents: Add missing resets of the next_event_forced flag

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the next_event_forced flag The prevention mechanism against timer interrupt starvation missed to reset the next_event_forced flag in…

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Apr 24, 2026

Updated

Nov 5, 2026

CVSS

—

Vendor

Linux

Product

Linux

CWE

—

Depth score

3 · Minimal

EPSS

0.11% · p1

Platforms

—

Source

CVEORG

Vector

—

CISA SSVC

decided 2026-11-05

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Nov 5.

0.1% → 0.1%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 195 days

Apr 24, 2026Published
Disclosed via CVEORG
Nov 5, 2026Record revised
Last analysed / modified upstream
Nov 5, 2026EPSS first tracked
0.1%

Linux #cve.org

Affected

Linux >= d6e152d905bdb1f32f9d99775e2f453350399a6a < 9401b593fa48218d2667df1610b0ebc518554880
Linux >= d6e152d905bdb1f32f9d99775e2f453350399a6a < 4096fd0e8eaea13ebe5206700b33f49635ae18e5
Linux 7.0

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

clockevents: Add missing resets of the next_event_forced flag

The prevention mechanism against timer interrupt starvation missed to reset the next_event_forced flag in a couple of places:

- When the clock event state changes. That can cause the flag to be
  stale over a shutdown/startup sequence

- When a non-forced event is armed, which then prevents rearming before
  that event. If that event is far out in the future this will cause
  missed timer interrupts.

- In the suspend wakeup handler.

That led to stalls which have been reported by several people.

Add the missing resets, which fixes the problems for the reporters.

Affected

Linux >= d6e152d905bdb1f32f9d99775e2f453350399a6a < 9401b593fa48218d2667df1610b0ebc518554880
Linux >= d6e152d905bdb1f32f9d99775e2f453350399a6a < 4096fd0e8eaea13ebe5206700b33f49635ae18e5
Linux 7.0

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

clockevents: Add missing resets of the next_event_forced flag

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

Overview

In the Linux kernel, the following vulnerability has been resolved:

clockevents: Add missing resets of the next_event_forced flag

The prevention mechanism against timer interrupt starvation missed to reset the next_event_forced flag in a couple of places:

- When the clock event state changes. That can cause the flag to be stale over a shutdown/startup sequence - When a non-forced event is armed, which then prevents rearming before that event. If that event is far out in the future this will cause missed timer interrupts. - In the suspend wakeup handler.

That led to stalls which have been reported by several people.

Add the missing resets, which fixes the problems for the reporters.