CVE-2026-31559

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-31559

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31559.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-31559

Downstream

Published

2026-04-24T14:35:41Z

Modified

2026-10-08T02:50:42Z

Summary

LoongArch: Fix missing NULL checks for kstrdup()

Details

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix missing NULL checks for kstrdup()

Replace "of_find_node_by_path("/")" with "of_root" to avoid multiple calls to "of_node_put()".
Fix a potential kernel oops during early boot when memory allocation fails while parsing CPU model from device tree.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31559.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

facc69f43502c135c16b97d5ded7253f15597912

Fixed

5e7fde2c551f86e6c3de3fd7a9b1f52806ac8db0

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

70a2365e18affc5ebdaab1ca6a0b3c4f3aac2ee8

Fixed

a1da957c25cf751a2dce8fb7777f82ccbac0cb3e

Fixed

b61a309743322fb57fb9afa9aa3495ac758e4f5e

Fixed

3a28daa9b7d7c2ddf2c722e9e95d7e0928bf0cd1

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.12.43

Fixed

6.12.80

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.15.11

Fixed

6.16

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.16.2

Fixed

6.17

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

620805dc674eab3055543496a7ef25beb9ffd2a8

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

8dfeedf9eceadc1a2fc9066b4c5230690d1cad48

Affected versions

v6.*

v6.12.43

v6.12.44

v6.12.45

v6.12.46

v6.12.47

v6.12.48

v6.12.49

v6.12.50

v6.12.51

v6.12.52

v6.12.53

v6.12.54

v6.12.55

v6.12.56

v6.12.57

v6.12.58

v6.12.59

v6.12.60

v6.12.61

v6.12.62

v6.12.63

v6.12.64

v6.12.65

v6.12.66

v6.12.67

v6.12.68

v6.12.69

v6.12.70

v6.12.71

v6.12.72

v6.12.73

v6.12.74

v6.12.75

v6.12.76

v6.12.77

v6.12.78

v6.12.79

v6.15.11

v6.16.10

v6.16.11

v6.16.12

v6.16.2

v6.16.3

v6.16.4

v6.16.5

v6.16.6

v6.16.7

v6.16.8

v6.16.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31559.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.12.80

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.21

Type: ECOSYSTEM
Events: Introduced

6.17.0

Fixed

6.19.11

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31559.json"