CVE-2026-31621: bnge: return after auxiliary_device_uninit() in error path
bnge: return after auxiliarydeviceuninit() in error path
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Add the missing return in the bnge driver error path so that the function returns immediately after calling auxiliary_device_uninit(). Apply the upstream kernel patch or modify the bnge driver source to insert a 'return' following the auxiliary_device_uninit() call to avoid dereferencing bd->auxr_dev after it has been freed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31621?
CVE-2026-31621 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-31621?
To fix CVE-2026-31621, you need to update your Linux kernel to the latest stable version that contains the patch.
What are the potential impacts of CVE-2026-31621?
The impact of CVE-2026-31621 may include instability in the network driver leading to unexpected behaviors in affected systems.
Which versions of the Linux kernel are affected by CVE-2026-31621?
CVE-2026-31621 affects specific versions of the Linux kernel that utilize the bnge network driver.
Is CVE-2026-31621 actively exploited in the wild?
As of now, there is no public information indicating active exploitation of CVE-2026-31621 in the wild.