CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created
In the Linux kernel, the following vulnerability has been resolved:
net: rfkill: prevent unlimited numbers of rfkill events from being created
Userspace can create an unlimited number of rfkill events if the system is so configured, while not consuming them from the rfkill file descriptor, causing a potential out of memory situation. Prevent this from bounding the number of pending rfkill events at a "large" number (i.e. 1000) to prevent abuses like this.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31670?
CVE-2026-31670 has been classified with a moderate severity level due to its potential to allow unlimited rfkill events.
How do I fix CVE-2026-31670?
To fix CVE-2026-31670, update the Linux kernel to the latest stable version where the vulnerability has been patched.
Who is affected by CVE-2026-31670?
CVE-2026-31670 affects users of the Linux kernel, particularly systems using rfkill features.
What are the potential impacts of CVE-2026-31670?
The potential impact of CVE-2026-31670 includes system instability and excessive resource consumption due to unlimited rfkill events.
When was CVE-2026-31670 reported?
CVE-2026-31670 was reported in early 2026 as part of a series of network-related vulnerabilities in the Linux kernel.