CVE Database›Document archive›CVE-2026-31744

CVE-2026-31744

kernel: PM: EM: Fix NULL pointer dereference when perf domain ID is not found

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. When processing energy model performance domains, the dev_energymodel_nl_get_perf_domains_doit() function fails to validate the return value from em_perf_domain_get_by_id(). If a non-existent performance domain ID is provided, this leads to a null pointer dereference, which can cause a system crash and result in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-252 · Unchecked Return Value