Linux Kernel Vulnerability in EDAC Memory Controller Driver

CVE-2026-31689

What is CVE-2026-31689?

This vulnerability in the Linux Kernel affects the EDAC memory controller driver due to improper initialization of devices during the memory controller allocation process. When the memory controller's private information allocation fails, the error handling sequence incorrectly calls the device's release function before the device itself is properly initialized. This leads to potential system instability and could expose the system to unpredictable behavior, as the system attempts to deallocate uninitialized objects, resulting in a warning message and potential crashes. Developers need to ensure that the initialization sequence is correctly ordered to prevent such vulnerabilities from impacting system reliability.

References