Use-After-Free Vulnerability in Linux Kernel Affecting Graphics Drivers

CVE-2026-31490

What is CVE-2026-31490?

A vulnerability in the Linux kernel affects the graphics driver subsystem, specifically impacting the migration restore process. When an error occurs in the function xe_sriov_pf_migration_restore_produce(), the data pointer is not reset to NULL, which can create a scenario for use-after-free vulnerabilities during subsequent write operations. This flaw could lead to memory access issues and potential exploitation in systems utilizing affected kernel versions. The issue has been corrected by ensuring that the pointer is set to NULL upon encountering an error, thereby preventing unintended access to freed memory resources.

References