CVE-2026-31736

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the mtk ppe component of the ethernet network subsystem when gmac0 is disabled. The system crashes because the code attempts to access netdev ops directly while eth->netdev[0] is NULL. This happens during the precheck for a valid ingress device, which incorrectly only checks the first net device instead of verifying if any mtk eth net devices match the netdev ops of the ingress device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.