CVE-2026-31540

A flaw was found in the Linux kernel's i915 graphics driver. When the i915 driver firmware binaries are not present, a critical pointer is dereferenced during the system suspend operation. This can allow a local user to trigger a kernel NULL pointer dereference, leading to a system crash and a Denial of Service (DoS).

This vulnerability is rated as having a Low severity because triggering the crash requires a specific non-default condition where Intel graphics hardware is utilized without the requisite firmware files installed, combined with initiating a system suspend sequence. In standard Red Hat Enterprise Linux deployments, necessary firmware files are supplied by default packages, and server environments rarely execute system suspend procedures. Furthermore, initiating power-management operations such as suspend typically necessitates elevated local privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.