PT-2026-34924 · Linux · Linux Kernel

CVE-2026-31572

·

Published

2026-03-20

·

Updated

2026-04-28

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0
Description A race condition exists in the amdisp i2c device during the resume-probe process. The issue occurs because the pm runtime get sync() function, called before i2c dw probe(), triggers a power management resume that powers on the ISP and invokes the amdisp i2c runtime resume before the probe completes. This leads to a NULL dereferencing issue.
Recommendations Update the Linux kernel to version 7.0 or later. As a temporary mitigation, restrict the use of the amdisp i2c device until the update is applied.

Exploit

Fix

Race Condition

Time Of Check To Time Of Use

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10893
CVE-2026-31572

Affected Products

Linux Kernel