CVE Database›Document archive›CVE-2026-31695

CVE-2026-31695

kernel: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's virt_wifi component. A local user can exploit a race condition during the unregistration of a virt_wifi network device, where its parent pointer might refer to freed memory during ethtool operations. This use-after-free vulnerability can lead to system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference