PT-2026-36380 · Linux · Linux Kernel

CVE-2026-31745

·

Published

2026-03-21

·

Updated

2026-05-01

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A double free issue exists in the reset add gpio aux device() function. When the auxiliary device add() function fails, reset add gpio aux device() triggers auxiliary device uninit(adev). The device release callback reset gpio aux device release() frees the adev variable, but the error path subsequently calls kfree(adev) again, leading to a double free (a situation where memory is freed twice, potentially causing system instability or crashes).
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Double Free

Multiple Releases of Same Resource or Handle

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12640
CVE-2026-31745

Affected Products

Linux Kernel