CVE-2026-31744
Description
A flaw was found in the Linux kernel. When processing energy model performance domains, the dev_energymodel_nl_get_perf_domains_doit() function fails to validate the return value from em_perf_domain_get_by_id(). If a non-existent performance domain ID is provided, this leads to a null pointer dereference, which can cause a system crash and result in a Denial of Service (DoS).
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: Unexpected State; DoS: Crash, Exit, or Restart
An unexpected return value could place the system in a state that could lead to a crash or other unintended behaviors.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
