Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31672

wifi: rt2x00usb: fix devres lifetime

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the USB anchor lifetime so that it is released on driver unbind.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < 64a457f6afbf15f984d95201a9a1e71eed3f9dd1affected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < 65518a6965d527c53013947031f26754f6a4f6afaffected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < 15b233e33b35b927bd8d0044c15325564ea1ba24affected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < 1de5c76bf40e9cdeebf54662f63011fb10fa452faffected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < b245db719bc7e57abf48bd5701662b270c3880f7affected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < e360d15fcb1e819eef49e3d4434d8050542eed16affected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < c99f198841b41735796e2ddfcd573783fb552eb9affected
  • 8b4c0009313f3d42e2540e3e1f776097dd0db73d to < 25369b22223d1c56e42a0cd4ac9137349d5a898eaffected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.169 to ≤ 6.1.*unaffected
  • 6.6.135 to ≤ 6.6.*unaffected
  • 6.12.82 to ≤ 6.12.*unaffected
  • 6.18.23 to ≤ 6.18.*unaffected
  • 6.19.13 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References