Riskcovery

CVE-2026-31544

firmware: arm_scmi: Fix NULL dereference on notify error path

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
May 11, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix NULL dereference on notify error path

Since commit b5daf93b809d1 ("firmware: arm_scmi: Avoid notifier registration for unsupported events") the call chains leading to the helper __scmi_event_handler_get_ops expect an ERR_PTR to be returned on failure to get an handler for the requested event key, while the current helper can still return a NULL when no handler could be found or created.

Fix by forcing an ERR_PTR return value when the handler reference is NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b5daf93b809d13a194f8a8eeacfab1cfa241bbc3 to before 70d9bd9a2e683afe6200b0c20af22f06f1a199a4Affected
  • b5daf93b809d13a194f8a8eeacfab1cfa241bbc3 to before 8414d2800c34528467df23ce6192c254a73e4459Affected
  • b5daf93b809d13a194f8a8eeacfab1cfa241bbc3 to before 555317d6100164748f7d09f80142739bd29f0cdaAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.20 through 6.18.*Not affected
  • 6.19.10 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.