PT-2026-35495 · Linux · Linux Kernel

Claude · Published 2026-04-27 · Updated 2026-06-05 · CVE-2026-31689

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the EDAC/mc component where the error path ordering in the edac mc alloc() function is incorrect. When the mci->pvt info allocation fails, the system calls put device(), which triggers the device's release function. Because device initialize() occurs after the failed allocation, the device and its release function pointer remain uninitialized at the time of the call, leading to a null pointer dereference in kobject put().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31689

ECHO-6C24-F099-FB25

OESA-2026-2581

Affected Products

Linux Kernel

References · 119

• https://nvd.nist.gov/vuln/detail/CVE-2025-23145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31398 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31698 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31532 · Security Note
• https://git.kernel.org/stable/c/aae95970fad2127a1bd49d8713c7cd0677dcd2d6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-71094 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43148 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31518 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31496 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31452 · Security Note