PT-2026-34924

CVE-2026-31572

·

Published

2026-03-20

·

Updated

2026-04-28

Description by

CVSS 3.1
4.7
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0
Description A race condition exists in the amdisp i2c device during the resume-probe process. The issue occurs because the pm runtime get sync() function, called before i2c dw probe(), triggers a power management resume that powers on the ISP and invokes the amdisp i2c runtime resume before the probe completes. This leads to a NULL dereferencing issue.
Recommendations Update the Linux kernel to version 7.0 or later. As a temporary mitigation, restrict the use of the amdisp i2c device until the update is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾