cve-2026-31545

CVE-2026-31545 is a medium-severity Linux kernel vulnerability disclosed in April 2026, affecting the NXP NCI NFC driver. The flaw occurs when firmware and enable GPIO lines are driven through sleep-capable controllers like I2C GPIO expanders, leading to a kernel warning. The fix was applied via stable kernel patches. While this bug does not directly impact desktop Windows users, it highlights how platform security often depends on interactions between firmware, buses, power management, and driver assumptions. The tag covers discussions about the vulnerability's nature, its availability impact, and the broader implications for modern system security.