PT-2026-34930 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31578

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the as102 usb driver. When the as102 usb probe() function encounters an error after successfully calling usb register dev(), it may call usb deregister dev() and immediately free the memory associated with as102 dev t. If a userspace process successfully opens the device before deregistration, the file descriptor remains valid. When this descriptor is eventually closed, the as102 release() function (which calls as102 usb release()) attempts to access or free the as102 dev t memory again, leading to a use-after-free and double-free scenario.

Recommendations Update the Linux kernel to a version where the as102 usb probe() function is modified to defer freeing as102 dev t memory to the .release() function after usb register dev() has succeeded.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31578

ECHO-CCB0-459E-304A

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://security-tracker.debian.org/tracker/CVE-2026-31578 · Vendor Advisory
• https://git.kernel.org/stable/c/8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c · Patch
• https://git.kernel.org/stable/c/7e5aedf6059cba2a669d86caeaf5a51f33ec85a1 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/09e9206008b887aa553733bd915d73131071a086 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31578 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31578 · Security Note
• https://git.kernel.org/stable/c/2eeae47a438694408189138048a786be99954032 · Patch
• https://git.kernel.org/stable/c/582fbecb3756330006fe1950762412a68c2cacd2 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31578 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31578 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31578 · Security Note
• https://git.kernel.org/stable/c/cb8092038e95dc1113a68e63762de40fff61ba71 · Patch
• https://suse.com/security/cve/CVE-2026-31577 · Note