CVE-2026-31506CWE-415

CVE-2026-31506

High · published April 22, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bcmasp: fix double free of WoL irq

We do not need to free wol_irq since it was instantiated with

devm_request_irq(). So devres will free for us.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-415 · Double Free
Published
2026-04-22T18:16Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6.1, < 6.12.806.12.80
linux/linux_kernel≥ 6.13, < 6.18.216.18.21
linux/linux_kernel≥ 6.19, < 6.19.116.19.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/121a6ad9cd42ba3bfc57deae93e3326515c2afe1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8a30509ce6a29bdf18e0802383c524a7b2357ec0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9e5f5c07cc7d66522f8c9676c28605eba5d4a20e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c5e2de193831ab9610a1ca542507f75d126f09b5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cbfa5be2bf64511d49b854a0f9fd6d0b5118621f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 22 APR 13:54Z
    net: bcmasp: fix double free of WoL irq
    cvelistv5