CVE-2026-31689 is a medium severity vulnerability in the Linux kernel's EDAC/mc component. It involves incorrect error path ordering in the edac_mc_alloc() function, where a device's release function is called before the device is properly initialized, potentially causing a kernel warning or crash. The issue arises when allocation of mci->pvt_info fails, leading to a call to put_device() before device_initialize() has been invoked. This flaw has been fixed by reordering the initialization sequence to ensure the device and its release function pointer are set before use.