Improper control of a resource through its lifetime in Linux kernel - CVE-2026-31571

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper state management in the i915 NV12 plane handling logic when processing userspace plane reconfiguration requests. A local user can reconfigure a plane previously selected as a Y plane as a normal plane to cause a denial of service.

The issue occurs when plane state computed by plane_atomic_check() is later clobbered by unlink_nv12_plane().

Affected software

How to mitigate CVE-2026-31571

External References

• https://git.kernel.org/stable/c/12f3b6cbab8fbeb95097685b40f0147406cf9746
• https://git.kernel.org/stable/c/70e2eb91cb6310a3508439f6f2539dfffa0abf77
• https://git.kernel.org/stable/c/bfa71b7a9dc6b5b8af157686e03308291141d00c

Related Security Bulletins

• Improper control of a resource through its lifetime in Linux kernel i915 display driver