CVE-2026-31552
kernel: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 24, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's wlcore component. When the system attempts to allocate memory for a network packet and there is insufficient space, an incorrect error code is returned. This error handling issue causes the system to repeatedly attempt to process the same packet in an endless loop, leading to a CPU soft lockup. This can result in a Denial of Service (DoS) for the affected system.
Statement
This vulnerability is rated as Moderate impact because it results only in a denial of service (CPU soft lockup) without exposing sensitive information or allowing privilege escalation, and it requires the presence of specific hardware. The issue affects the Texas Instruments wlcore wireless driver, which is not used in standard enterprise server deployments. Consequently, systems lacking this wireless chipset hardware are not exposed to this flaw during typical operations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')