CVE-2026-31490: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the data pointer is not set to NULL, which can trigger use-after-free in subsequent .write() calls. Set the pointer to NULL upon error to fix the problem. (cherry picked from commit 4f53d8c6d23527d734fe3531d08e15cb170a0819)

Affected products

• Linux Linux Kernel: from 6.19.1, before 6.19.11 (fixed in 6.19.11); version 6.19 only; version 7.0 only

Published 2026-04-22. Last modified 2026-06-17.