CVE-2026-31559

Updated on 24 Apr 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup()

  1. Replace “of_find_node_by_path(”/")" with “of_root” to avoid multiple calls to “of_node_put()”.
  2. Fix a potential kernel oops during early boot when memory allocation fails while parsing CPU model from device tree. A flaw was found in the Linux kernel. During the system’s initial startup, a critical error can occur if memory allocation fails while the system is reading CPU information. This is due to a missing check for empty or invalid data when duplicating strings, which can lead to a system crash, resulting in a Denial of Service (DoS).

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Planned