CVE-2026-31661: wifi: brcmsmac: Fix dma_free_coherent() size
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmsmac: Fix dmafreecoherent() size
dmaallocconsistent() may change the size to align it. The new size is saved in alloced.
Change the free size to match the allocation size.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.137.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Update wifi: brcmsmac so dma_free_coherent() uses the allocation size saved in alloced, matching the aligned size that dma_alloc_consistent() may produce.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31661?
The severity of CVE-2026-31661 is not explicitly stated but it addresses a bug related to memory allocation management in the Linux kernel.
How do I fix CVE-2026-31661?
To fix CVE-2026-31661, update the Linux kernel to a version that includes the patch for this vulnerability.
What software versions are affected by CVE-2026-31661?
CVE-2026-31661 affects various versions of the Linux kernel, specifically versions between 3.2.1 and 7.0-rc7.
What is the nature of the vulnerability in CVE-2026-31661?
CVE-2026-31661 is related to incorrect size handling in dma_free_coherent(), which can lead to potential memory issues.
Is CVE-2026-31661 a critical vulnerability?
CVE-2026-31661 is significant but does not have a specified critical rating; however, it addresses important memory management concerns.