PT-2026-34928 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31576

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the hackrf driver. When the hackrf probe() function registers a device and subsequently encounters an error, it may free device memory using kfree() while file descriptors are still open. Because open handles and in-flight I/O remain valid until the last reference is dropped and the driver release function is invoked, this leads to a use-after-free situation. Additionally, since the release function also frees memory, a double-free can occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31576

ECHO-B5D5-C701-6E1A

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://security-tracker.debian.org/tracker/CVE-2026-31576 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31576 · Vendor Advisory
• https://git.kernel.org/stable/c/45cbaf5c7cdc5386d86377f0daf94a17a007fed0 · Patch
• https://git.kernel.org/stable/c/07e9e674b6146b1f6fc41b1f54b8968bf2802824 · Patch
• https://git.kernel.org/stable/c/3b7da2b4d0fe014eff181ed37e3bf832eb8ed258 · Patch
• https://git.kernel.org/stable/c/98a0a81ce78020c2522e0046f49d200de9778cb9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31576 · Security Note
• https://git.kernel.org/stable/c/2145c71a8044362e82e9923f001ba2aeb771b848 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31576 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/fcd1d70792a35c8a97414fe429f48311e41269c2 · Patch
• https://ubuntu.com/security/CVE-2026-31576 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31576 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31576 · Security Note
• https://suse.com/security/cve/CVE-2026-31621 · Note