PT-2026-36325 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-06 · CVE-2026-31695

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the virt wifi component of the Linux kernel. The problem occurs because SET NETDEV DEV(dev, &priv->lowerdev->dev) is executed for virt wifi net devices, but the unregistration of a virt wifi device in netdev run todo() can happen simultaneously with the device referenced by SET NETDEV DEV(). This can lead to a situation where the dev.parent field points to freed memory. When ethnl ops begin() calls pm runtime get sync(dev->dev.parent) during ethtool operations on a device being unregistered, it results in a use-after-free. A use-after-free is a memory corruption flaw where a program continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31695

ECHO-CD18-CB82-1644

Affected Products

Linux Kernel

References · 16

• https://git.kernel.org/stable/c/5bbadf60b121065ffb267ec92018607b9c1c7524 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31695 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31695 · Security Note
• https://git.kernel.org/stable/c/dcb5915696bd7b32b6404a897c24ee47cb23e772 · Patch
• https://git.kernel.org/stable/c/5adc01506da94dfaab76f3d1b8410a8ca7bfc59d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31695 · Security Note
• https://git.kernel.org/stable/c/e90f3e74e1ebc26c461a74be490d322716bcdcb4 · Patch
• https://git.kernel.org/stable/c/789b06f9f39cdc7e895bdab2c034e39c41c8f8d6 · Patch
• https://ubuntu.com/security/CVE-2026-31695 · Vendor Advisory
• https://git.kernel.org/stable/c/d1e3aa80e6e04410ba89eaaba4441a0d749d181d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31695 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31695 · Vendor Advisory
• https://git.kernel.org/stable/c/c5fa98842783ed227365d1303785de6a67020c8d · Patch
• https://git.kernel.org/linus/789b06f9f39cdc7e895bdab2c034e39c41c8f8d6 · Note