In the Linux kernel, the following vulnerability has been resolved:

wifi: rt2x00usb: fix devres lifetime

USB drivers bind to USB interfaces and any device managed resources
should have their lifetime tied to the interface rather than parent USB
device. This avoids issues like memory leaks when drivers are unbound
without their devices being physically disconnected (e.g. on probe
deferral or configuration changes).

Fix the USB anchor lifetime so that it is released on driver unbind.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < 64a457f6afbf15f984d95201a9a1e71eed3f9dd1
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < 65518a6965d527c53013947031f26754f6a4f6af
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < 15b233e33b35b927bd8d0044c15325564ea1ba24
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < 1de5c76bf40e9cdeebf54662f63011fb10fa452f
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < b245db719bc7e57abf48bd5701662b270c3880f7
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < e360d15fcb1e819eef49e3d4434d8050542eed16
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < c99f198841b41735796e2ddfcd573783fb552eb9
8b4c0009313f3d42e2540e3e1f776097dd0db73d affected < 25369b22223d1c56e42a0cd4ac9137349d5a898e
Linux Linux affected
Version Status Constraints
4.7 affected —
0 unaffected < 4.7
5.10.253 unaffected ≤ 5.10.*
5.15.203 unaffected ≤ 5.15.*
6.1.169 unaffected ≤ 6.1.*
6.6.135 unaffected ≤ 6.6.*
6.12.82 unaffected ≤ 6.12.*
6.18.23 unaffected ≤ 6.18.*
6.19.13 unaffected ≤ 6.19.*
7.0 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/15b233e33b35b927bd8d0044c15325564ea1ba24 cve-icon cve-icon
https://git.kernel.org/stable/c/1de5c76bf40e9cdeebf54662f63011fb10fa452f cve-icon cve-icon
https://git.kernel.org/stable/c/25369b22223d1c56e42a0cd4ac9137349d5a898e cve-icon cve-icon
https://git.kernel.org/stable/c/64a457f6afbf15f984d95201a9a1e71eed3f9dd1 cve-icon cve-icon
https://git.kernel.org/stable/c/65518a6965d527c53013947031f26754f6a4f6af cve-icon cve-icon
https://git.kernel.org/stable/c/b245db719bc7e57abf48bd5701662b270c3880f7 cve-icon cve-icon
https://git.kernel.org/stable/c/c99f198841b41735796e2ddfcd573783fb552eb9 cve-icon cve-icon
https://git.kernel.org/stable/c/e360d15fcb1e819eef49e3d4434d8050542eed16 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026042407-CVE-2026-31672-e116@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-31672 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-31672 cve-icon
History

Sat, 25 Apr 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-911
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 24 Apr 2026 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the USB anchor lifetime so that it is released on driver unbind.
Title wifi: rt2x00usb: fix devres lifetime
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-04-24T14:45:19.725Z

Reserved: 2026-03-09T15:48:24.130Z

Link: CVE-2026-31672

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-04-24T15:16:47.017

Modified: 2026-04-24T17:51:40.810

Link: CVE-2026-31672

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-04-24T00:00:00Z

Links: CVE-2026-31672 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses