CVE-2026-31753

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the linedisp release() function. The issue occurs because the function uses to linedisp() to retrieve the enclosing struct linedisp, which relies on the attachment list. If the attachment is removed before put device() invokes the release callback—which can happen during linedisp unregister() or certain linedisp register() error paths—to linedisp() returns NULL, leading to a crash when the system attempts to free display resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.