CVE-2026-31769 is a use-after-free vulnerability in the Linux kernel's gpib IO ioctl handlers. The flaw arises because the gpib_descriptor pointer is accessed after the release of a mutex, allowing a concurrent close operation to free the descriptor while it is still in use. This can lead to memory corruption and potentially allow an attacker with local privileges to cause denial of service or escalate privileges. The issue is addressed by introducing a kernel-only reference count to protect the descriptor during IO operations.