The Linux kernel vulnerability CVE-2026-31439 concerns the dmaengine xilinx xdma driver where devm_regmap_init_mmio returns an ERR_PTR() on error rather than NULL. The kernel's error handling was incorrect, using a wrong error check and message, and retrieving an incorrect error code. This flaw was resolved by fixing the error handling logic to correctly interpret ERR_PTR() values. The issue affects multiple Linux kernel versions prior to 6.8.0 and related builds in the linux-hwe-edge product line. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but with high impact on availability. The vendor has released patches as part of Ubuntu security notices USN-8567-1 and USN-8574-1, which include numerous other kernel security fixes. Users are advised to update and reboot to apply the fixes.

This vulnerability does not affect confidentiality or integrity but can cause a high impact on availability, potentially leading to denial of service conditions. The attack requires local access with low privileges and no user interaction. The vulnerability arises from improper error handling in the dmaengine xilinx xdma driver, which could cause system instability or crashes if exploited.

A patch is available from the vendor and should be applied promptly. The fixes are included in Linux kernel updates for the linux-hwe-edge package, specifically versions 6.8.0 and later. After applying the update, a system reboot is required to complete remediation. Due to an ABI change in the kernel update, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's official Ubuntu security notices USN-8567-1 and USN-8574-1 for detailed update instructions.