Riskcovery

CVE-2026-31559

LoongArch: Fix missing NULL checks for kstrdup()

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
May 23, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix missing NULL checks for kstrdup()

1. Replace "of_find_node_by_path("/")" with "of_root" to avoid multiple calls to "of_node_put()".

2. Fix a potential kernel oops during early boot when memory allocation fails while parsing CPU model from device tree.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • facc69f43502c135c16b97d5ded7253f15597912 to before 5e7fde2c551f86e6c3de3fd7a9b1f52806ac8db0Affected
  • 70a2365e18affc5ebdaab1ca6a0b3c4f3aac2ee8 to before a1da957c25cf751a2dce8fb7777f82ccbac0cb3eAffected
  • 70a2365e18affc5ebdaab1ca6a0b3c4f3aac2ee8 to before b61a309743322fb57fb9afa9aa3495ac758e4f5eAffected
  • 70a2365e18affc5ebdaab1ca6a0b3c4f3aac2ee8 to before 3a28daa9b7d7c2ddf2c722e9e95d7e0928bf0cd1Affected
  • 620805dc674eab3055543496a7ef25beb9ffd2a8Affected
  • 8dfeedf9eceadc1a2fc9066b4c5230690d1cad48Affected
  • 6.12.43 to before 6.12.80Affected
  • 6.15.11 to before 6.16Affected
  • 6.16.2 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.12.80 through 6.12.*Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.