CVE Database›Document archive›CVE-2026-31689

CVE-2026-31689

kernel: EDAC/mc: Fix error path ordering in edac_mc_alloc()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the EDAC/mc module of the Linux kernel. An error in the ordering of operations within the edac_mc_alloc function can lead to a situation where a device's release function is called before the device is fully initialized. This improper initialization can result in a kernel warning and potential system instability, leading to a denial of service.

Statement

This Moderate flaw in the Linux kernel's EDAC/mc module can lead to a denial of service due to improper device initialization. When the edac_mc_alloc() function fails, the device's release function may be called before it is fully initialized, causing a kernel warning and system instability. This issue affects Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS 2.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-824 · Access of Uninitialized Pointer