CVE-2026-31744
kernel: PM: EM: Fix NULL pointer dereference when perf domain ID is not found
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel. When processing energy model performance domains, the dev_energymodel_nl_get_perf_domains_doit() function fails to validate the return value from em_perf_domain_get_by_id(). If a non-existent performance domain ID is provided, this leads to a null pointer dereference, which can cause a system crash and result in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-252 · Unchecked Return Value