CVE-2026-31736 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled, the precheck for a valid ingress device will cause a NULL pointer deref and crash the system. This happens because eth->netdev[0] will be NULL but the code will directly try to access netdev_ops. Instead of just checking for the first net_device, it must be checked if any of the mtk_eth net_devices is matching the netdev_ops of the ingress device.
A vulnerability in the Linux kernel's handling of MediaTek Ethernet PPE offloading can lead to a system crash. When the GMAC0 interface is disabled, the code fails to properly check for a valid ingress device, resulting in a NULL pointer dereference. This occurs because the first network device in the MTK Ethernet structure is NULL, yet the code attempts to access its operations. The issue can be exploited by triggering a flow offload replacement while GMAC0 is disabled, causing the kernel to dereference a NULL pointer and crash the system.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for updating the Linux kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b832aad33e6f160fda310f0306a6483d85e9d6e | kernel.org | Patch |
| https://git.kernel.org/stable/c/5dff799c677152dde963c3917bacd9127b03e145 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7b2380f0a0e374010c1a4a13203511b9dee5b166 | kernel.org | Patch |
| https://git.kernel.org/stable/c/976ff48c2ac6e6b25b01428c9d7997bcd0fb2949 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.81 >= 6.13, < 6.18.22 >= 6.19, < 6.19.12 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | New CVE Received | kernel.org |