PT-2026-34924
CVE-2026-31572
·
Published
2026-03-20
·
Updated
2026-04-28
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.0
Description
A race condition exists in the amdisp i2c device during the resume-probe process. The issue occurs because the
pm runtime get sync() function, called before i2c dw probe(), triggers a power management resume that powers on the ISP and invokes the amdisp i2c runtime resume before the probe completes. This leads to a NULL dereferencing issue.Recommendations
Update the Linux kernel to version 7.0 or later. As a temporary mitigation, restrict the use of the amdisp i2c device until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾