CVE-2026-31695
kernel: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's virt_wifi component. A local user can exploit a race condition during the unregistration of a virt_wifi network device, where its parent pointer might refer to freed memory during ethtool operations. This use-after-free vulnerability can lead to system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference