Linux Kernel CVE-2026-31439

The vulnerability resides in the dmaengine/xilinx/xdma subsystem of the Linux kernel (CPE: cpe:2.3:o:linux:linux_kernel). The devm_regmap_init_mmio() API, part of the kernel's regmap abstraction layer for memory-mapped I/O register access, returns an ERR_PTR()-encoded error value - not NULL - upon failure. The driver code incorrectly checked the result with a NULL comparison rather than the canonical IS_ERR() macro, and additionally propagated the wrong error code by reading from the ERR_PTR value instead of using PTR_ERR(). The root cause class is improper error handling (analogous to CWE-390/CWE-755), where the error sentinel type mismatch results in a live kernel pointer dereference of an invalid address, producing a kernel oops or panic. The bug was introduced at commit 17ce252266c7f016ece026492c45838f852ddc79. A secondary discrepancy: the vulnerability is tagged 'Information Disclosure' in ENISA EUVD, but the CVSS vector specifies C:N (no confidentiality impact) - this tag is likely erroneous or refers to the misleading error message behavior, not actual data exposure.