CVE-2026-31731

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the thermal core due to race conditions during thermal zone removal and resume operations. The functions thermal zone pm complete() and thermal zone device resume() re-initialize the poll queue delayed work, which can cause cancel delayed work sync() in thermal zone device unregister() to miss active work items. This leads to the thermal zone being freed prematurely while work items are still running. This occurs in two scenarios: when a work item continues running after thermal pm notify complete() is called, or when thermal zone device resume() re-initializes the poll queue after thermal zone exit() has returned.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.