CVE-2026-31753

kernel: auxdisplay: line-display: fix NULL dereference in linedisp_release

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within the auxdisplay and line-display modules. This vulnerability occurs when the linedisp_release() function attempts to free display resources. If the associated attachment list has already been removed, the function dereferences a null pointer, which can lead to a system crash. This issue results in a Denial of Service (DoS), making the system unavailable.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference