CVE-2026-31745 is a high-severity vulnerability in the Linux kernel's reset GPIO subsystem. It involves a double free error in the reset_add_gpio_aux_device() function's error handling path. Specifically, when auxiliary device addition fails, the code frees the device structure twice, which can lead to memory corruption. This flaw has been fixed by adjusting the freeing logic to avoid the second free call after auxiliary_device_uninit().