CVE-2026-31744

PM: EM: Fix NULL pointer dereference when perf domain ID is not found

published May 1, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

PM: EM: Fix NULL pointer dereference when perf domain ID is not found

dev_energymodel_nl_get_perf_domains_doit() calls

em_perf_domain_get_by_id() but does not check the return value before

passing it to __em_nl_get_pd_size(). When a caller supplies a

non-existent perf domain ID, em_perf_domain_get_by_id() returns NULL,

and __em_nl_get_pd_size() immediately dereferences pd->cpus

(struct offset 0x30), causing a NULL pointer dereference.

The sister handler dev_energymodel_nl_get_perf_table_doit() already

handles this correctly via __em_nl_get_pd_table_id(), which returns

NULL and causes the caller to return -EINVAL. Add the same NULL check

in the get-perf-domains do handler.

[ rjw: Subject and changelog edits ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-05-01T14:14Z
EPSS history
Timeline
  • 01 MAY 14:14Z
    PM: EM: Fix NULL pointer dereference when perf domain ID is not found
    cvelistv5