You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2026-31506
About this tag
CVE-2026-31506 is a Linux kernel vulnerability involving a double free in the bcmasp Ethernet driver's Wake-on-LAN IRQ cleanup. The issue arises when manual cleanup code attempts to free an IRQ that has already been handed to the devm_ managed resource framework, leading to potential system crashes or instability. The fix is straightforward, but the case highlights broader risks when kernel code mixes manual and managed resource allocation. The CVE was published on April 22, 2026, with no CVSS score assigned yet. This tag covers discussions and fixes related to this specific vulnerability.
CVE-2026-31506 has landed in the Linux kernel security stream as another reminder that even small cleanup mistakes in driver error paths can matter. In this case, the issue is a double free in the bcmasp Ethernet driver’s Wake-on-LAN interrupt handling, where the code tried to free an IRQ that...