CVE-2026-31759

A flaw was found in the Linux kernel's USB ULPI (UTMI+ Low Pin Interface) driver. An error in the ulpi_register_interface() function's cleanup path can lead to a double free vulnerability. This occurs when device_register() fails, causing the ulpi structure to be freed twice. A local attacker could potentially exploit this to cause memory corruption or a denial of service, leading to system instability.

ULPI interface registration error path could double-free; upstream fixes unwind ordering. Red Hat classifies this as USB ULPI core robustness; patching is the practical remediation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.