CVE-2026-31544

firmware: arm_scmi: Fix NULL dereference on notify error path

published April 24, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix NULL dereference on notify error path

Since commit b5daf93b809d1 ("firmware: arm_scmi: Avoid notifier

registration for unsupported events") the call chains leading to the helper

__scmi_event_handler_get_ops expect an ERR_PTR to be returned on failure to

get an handler for the requested event key, while the current helper can

still return a NULL when no handler could be found or created.

Fix by forcing an ERR_PTR return value when the handler reference is NULL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-04-24T14:33Z
EPSS history
Timeline
  • 24 APR 14:33Z
    firmware: arm_scmi: Fix NULL dereference on notify error path
    cvelistv5