PT-2026-36380 · Linux · Linux Kernel
CVE-2026-31745
·
Published
2026-03-21
·
Updated
2026-05-01
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A double free issue exists in the
reset add gpio aux device() function. When the auxiliary device add() function fails, reset add gpio aux device() triggers auxiliary device uninit(adev). The device release callback reset gpio aux device release() frees the adev variable, but the error path subsequently calls kfree(adev) again, leading to a double free (a situation where memory is freed twice, potentially causing system instability or crashes).Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Double Free
Multiple Releases of Same Resource or Handle
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel