CVE-2026-31604

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver. This vulnerability occurs when the driver fails to release a reference to a Universal Serial Bus (USB) device during certain probe errors, such as when descriptor parsing fails. A local attacker could potentially trigger this condition by plugging in a malformed USB device, leading to memory leaks. Over time, these unreleased resources could accumulate, potentially causing system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.