CVE-2026-31731

A flaw was found in the Linux kernel's thermal management subsystem. A race condition can occur when thermal zones are removed while the system is resuming from a power-saving state. This timing issue can cause the system to attempt to use memory that has already been freed, leading to a use-after-free vulnerability. The most significant consequence of this flaw is potential system instability or a denial of service.

Thermal core had races between zone removal and resume; upstream serializes lifetimes correctly. Red Hat notes impact as local power/thermal management stability. Update kernels—thermal core is not practically unloadable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.