CVE-2026-31672

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31672", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.130Z", "datePublished": "2026-04-24T14:45:19.725Z", "dateUpdated": "2026-11-06T15:32:22.260Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:13:24.521Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00usb: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the USB anchor lifetime so that it is released on driver unbind."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "versions": [{"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "64a457f6afbf15f984d95201a9a1e71eed3f9dd1", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "65518a6965d527c53013947031f26754f6a4f6af", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "15b233e33b35b927bd8d0044c15325564ea1ba24", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "1de5c76bf40e9cdeebf54662f63011fb10fa452f", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "b245db719bc7e57abf48bd5701662b270c3880f7", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "e360d15fcb1e819eef49e3d4434d8050542eed16", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "c99f198841b41735796e2ddfcd573783fb552eb9", "status": "affected", "versionType": "git"}, {"version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "25369b22223d1c56e42a0cd4ac9137349d5a898e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "versions": [{"version": "4.7", "status": "affected"}, {"version": "0", "lessThan": "4.7", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.169", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.135", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.82", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.23", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.13", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.1.169"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.6.135"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.12.82"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.18.23"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "6.19.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.7", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/64a457f6afbf15f984d95201a9a1e71eed3f9dd1"}, {"url": "https://git.kernel.org/stable/c/65518a6965d527c53013947031f26754f6a4f6af"}, {"url": "https://git.kernel.org/stable/c/15b233e33b35b927bd8d0044c15325564ea1ba24"}, {"url": "https://git.kernel.org/stable/c/1de5c76bf40e9cdeebf54662f63011fb10fa452f"}, {"url": "https://git.kernel.org/stable/c/b245db719bc7e57abf48bd5701662b270c3880f7"}, {"url": "https://git.kernel.org/stable/c/e360d15fcb1e819eef49e3d4434d8050542eed16"}, {"url": "https://git.kernel.org/stable/c/c99f198841b41735796e2ddfcd573783fb552eb9"}, {"url": "https://git.kernel.org/stable/c/25369b22223d1c56e42a0cd4ac9137349d5a898e"}], "title": "wifi: rt2x00usb: fix devres lifetime", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31672", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:24:01.713898Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:32:22.260Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31672", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:24:01.713898Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:24:03.145Z"}}], "cna": {"title": "wifi: rt2x00usb: fix devres lifetime", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "64a457f6afbf15f984d95201a9a1e71eed3f9dd1", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "65518a6965d527c53013947031f26754f6a4f6af", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "15b233e33b35b927bd8d0044c15325564ea1ba24", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "1de5c76bf40e9cdeebf54662f63011fb10fa452f", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "b245db719bc7e57abf48bd5701662b270c3880f7", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "e360d15fcb1e819eef49e3d4434d8050542eed16", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "c99f198841b41735796e2ddfcd573783fb552eb9", "versionType": "git"}, {"status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "lessThan": "25369b22223d1c56e42a0cd4ac9137349d5a898e", "versionType": "git"}], "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.7"}, {"status": "unaffected", "version": "0", "lessThan": "4.7", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.253", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.203", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.169", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.135", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.82", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.23", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.13", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/64a457f6afbf15f984d95201a9a1e71eed3f9dd1"}, {"url": "https://git.kernel.org/stable/c/65518a6965d527c53013947031f26754f6a4f6af"}, {"url": "https://git.kernel.org/stable/c/15b233e33b35b927bd8d0044c15325564ea1ba24"}, {"url": "https://git.kernel.org/stable/c/1de5c76bf40e9cdeebf54662f63011fb10fa452f"}, {"url": "https://git.kernel.org/stable/c/b245db719bc7e57abf48bd5701662b270c3880f7"}, {"url": "https://git.kernel.org/stable/c/e360d15fcb1e819eef49e3d4434d8050542eed16"}, {"url": "https://git.kernel.org/stable/c/c99f198841b41735796e2ddfcd573783fb552eb9"}, {"url": "https://git.kernel.org/stable/c/25369b22223d1c56e42a0cd4ac9137349d5a898e"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00usb: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the USB anchor lifetime so that it is released on driver unbind."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.203", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.169", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.135", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.82", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.23", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.13", "versionStartIncluding": "4.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "4.7"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:13:24.521Z"}}}, "cveMetadata": {"cveId": "CVE-2026-31672", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:32:22.260Z", "dateReserved": "2026-03-09T15:48:24.130Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-04-24T14:45:19.725Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "64a457f6afbf15f984d95201a9a1e71eed3f9dd1", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "65518a6965d527c53013947031f26754f6a4f6af", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "15b233e33b35b927bd8d0044c15325564ea1ba24", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "1de5c76bf40e9cdeebf54662f63011fb10fa452f", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "b245db719bc7e57abf48bd5701662b270c3880f7", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "e360d15fcb1e819eef49e3d4434d8050542eed16", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "c99f198841b41735796e2ddfcd573783fb552eb9", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}, {"lessThan": "25369b22223d1c56e42a0cd4ac9137349d5a898e", "status": "affected", "version": "8b4c0009313f3d42e2540e3e1f776097dd0db73d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/wireless/ralink/rt2x00/rt2x00usb.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.7"}, {"lessThan": "4.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.169", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.135", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.82", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.23", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.13", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "14F22FD3-1924-4551-8861-3022ADC6AACE", "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.7.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBEC0E5D-641C-4E98-A6D9-5799B10CE451", "versionEndExcluding": "6.1.169", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "15C1A1B2-14EE-494C-AF3E-D5A7BA640B39", "versionEndExcluding": "6.6.135", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "02904CAE-71D2-45B3-9EC3-F6A9D18B6307", "versionEndExcluding": "6.12.82", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9E09FDD-9EE3-4A56-92E2-2B30AFD0072F", "versionEndExcluding": "6.18.23", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "1490EF9B-9080-481C-8D22-1306AAE664E4", "versionEndExcluding": "6.19.13", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.7:-:*:*:*:*:*:*", "matchCriteriaId": "2F890998-2B89-4DE8-BA87-5B3D9A5E8E11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*", "matchCriteriaId": "512EE3A8-A590-4501-9A94-5D4B268D6138", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00usb: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the USB anchor lifetime so that it is released on driver unbind."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: rt2x00usb: corregir la vida \u00fatil de devres\n\nLos controladores USB se enlazan a interfaces USB y cualquier recurso gestionado por el dispositivo deber\u00eda tener su vida \u00fatil ligada a la interfaz en lugar de al dispositivo USB padre. Esto evita problemas como fugas de memoria cuando los controladores se desenlazan sin que sus dispositivos se desconecten f\u00edsicamente (p. ej., en aplazamiento de sondeo o cambios de configuraci\u00f3n).\n\nCorregir la vida \u00fatil del ancla USB para que se libere al desenlazarse el controlador."}], "id": "CVE-2026-31672", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-31672", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:24:01.713898Z", "version": "2.0.3"}}]}, "published": "2026-04-24T15:16:47.017", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/15b233e33b35b927bd8d0044c15325564ea1ba24"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1de5c76bf40e9cdeebf54662f63011fb10fa452f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/25369b22223d1c56e42a0cd4ac9137349d5a898e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/64a457f6afbf15f984d95201a9a1e71eed3f9dd1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/65518a6965d527c53013947031f26754f6a4f6af"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b245db719bc7e57abf48bd5701662b270c3880f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c99f198841b41735796e2ddfcd573783fb552eb9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e360d15fcb1e819eef49e3d4434d8050542eed16"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: wifi: rt2x00usb: fix devres lifetime", "id": "2461546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461546"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["A flaw was found in the Linux kernel's rt2x00usb component, which handles Wi-Fi USB devices. This issue stems from improper management of system memory allocated for USB devices. When a Wi-Fi USB device driver is unloaded without the device being physically disconnected, the system may fail to release the allocated memory, leading to a memory leak. Over time, this could exhaust system resources, potentially causing a Denial of Service (DoS) where the system becomes unresponsive or crashes."], "name": "CVE-2026-31672", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31672\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31672\nhttps://lore.kernel.org/linux-cve-announce/2026042407-CVE-2026-31672-e116@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,64a457f6afbf15f984d95201a9a1e71eed3f9dd1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,65518a6965d527c53013947031f26754f6a4f6af)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,15b233e33b35b927bd8d0044c15325564ea1ba24)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,1de5c76bf40e9cdeebf54662f63011fb10fa452f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,b245db719bc7e57abf48bd5701662b270c3880f7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,e360d15fcb1e819eef49e3d4434d8050542eed16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,c99f198841b41735796e2ddfcd573783fb552eb9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8b4c0009313f3d42e2540e3e1f776097dd0db73d,25369b22223d1c56e42a0cd4ac9137349d5a898e)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.169,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.135,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.82,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.23,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.13,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-28T20:01:25.193583+00:00", "value": {"mitigation_remediation": ["Upgrade the Linux kernel to the version containing the rt2x00usb devres lifetime fix; the commit is included in kernel releases after the patch.", "If a kernel upgrade cannot be performed immediately, prevent the rt2x00usb driver from loading on vulnerable systems or unload it during times when USB devices are updated. Disabling automatic driver binding for relevant USB interfaces can also mitigate the issue.", "Monitor memory usage for abnormal growth patterns associated with USB device unbinding, and schedule regular reboots or maintain scripts that restart affected services when memory thresholds are exceeded."], "summary": {"action": "Patch Kernel", "impact": "Memory Leak"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Linux kernel systems that include the rt2x00usb driver. The known CPE set lists kernels from version 4.7 through the 7.0 release candidates. Any distribution or vendor whose kernel build includes this driver without the recent commit that fixes the devres lifetime is at risk.", "description_and_impact": "The rt2x00usb USB driver in the Linux kernel incorrectly ties device resources to the parent USB device instead of the USB interface, causing memory to remain allocated when the driver is unbound without the device being physically disconnected. This flaw leads to gradual memory exhaustion when drivers are repeatedly unbound, such as during probe deferral or configuration changes. The primary consequence is a non\u2011remote denial of service through memory depletion, and the weakness corresponds to CWE\u2011401 (Memory Management).", "risk_and_exploitability": "The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The issue is not listed in CISA\u2019s KEV catalog. The likely attack vector is local manipulation of USB interfaces that triggers driver unbinding, so an attacker with local or removable USB access could repeatedly load and unload the driver to exhaust memory and disrupt system stability, but the flaw does not provide remote code execution or privilege escalation."}}}}, "created": "2026-04-27T21:00:11.885509+00:00", "updated": "2026-04-28T20:15:26.787737+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}