Use-After-Free in Linux Kernel ACPI EC Handler

CVE-2026-31426

What is CVE-2026-31426?

In the Linux kernel, a vulnerability arises from improper error handling in the ACPI EC setup function. When ec_install_handlers() encounters a deferred probe, it fails to clean up handler installations, which can lead to a use-after-free scenario. This issue may cause unprivileged sysfs reads to trigger erroneous memory access, potentially compromising system integrity on affected hardware platforms. The recommended mitigation involves ensuring proper cleanup of handlers during error situations.

References