Threats tagged 'ghsa-85jq-w8xm-9rcm'

CVE-2026-31744 is a vulnerability in the Linux kernel where a NULL pointer dereference occurs if a non-existent performance domain ID is supplied. This happens because the function dev_energymodel_nl_get_perf_domains_doit() does not check the return value of em_perf_domain_get_by_id() before dereferencing it, leading to a crash. The issue has been fixed by adding a NULL check similar to the one in the related handler dev_energymodel_nl_get_perf_table_doit().