CVE-2026-31506: net: bcmasp: fix double free of WoL irq

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-22 · updated 2026-10-21
Weakness: CWE-415

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devres will free for us.

Affected products

Linux kernel: from 6.6.1 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 6.6, 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5 (+2) — fixed in 6.12.80, 6.18.21, 6.19.11

How to fix

Upgrade to a fixed version: Linux kernel 6.12.80, 6.18.21, 6.19.11. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/121a6ad9cd42ba3bfc57deae93e3326515c2afe1
https://git.kernel.org/stable/c/8a30509ce6a29bdf18e0802383c524a7b2357ec0
https://git.kernel.org/stable/c/9e5f5c07cc7d66522f8c9676c28605eba5d4a20e
https://git.kernel.org/stable/c/c5e2de193831ab9610a1ca542507f75d126f09b5
https://git.kernel.org/stable/c/cbfa5be2bf64511d49b854a0f9fd6d0b5118621f

Get alerted when CVE-2026-31506 or the next vulnerability affects your stack