CVE-2026-31744

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the Linux kernel when a non-existent perf domain ID is supplied. The function dev energymodel nl get perf domains doit() calls em perf domain get by id() but fails to verify the return value before passing it to em nl get pd size(). Consequently, em nl get pd size() attempts to dereference pd->cpus, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.