CVE-2026-31458 is a vulnerability in the Linux kernel's DAMON subsystem where multiple sysfs command paths dereference an array element without verifying the array size. Privileged users can set the number of contexts to zero, causing NULL pointer dereferences when certain commands are executed via sysfs. This results in denial of service due to kernel crashes.