CVE-2026-31604
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the structures are needed after disconnect. This driver takes a reference to the USB device during probe but does not to release it on all probe errors (e.g. when descriptor parsing fails). Drop the redundant device reference to fix the leak, reduce cargo culting, make it easier to spot drivers where an extra reference is needed, and reduce the risk of further memory leaks.
How to fix
- linux linux_kernel6.6.136, 6.12.83, 6.18.24, 6.19.14, 7.0.1 or later
- git.kernel.org/stable/c/25a827b7e1d5747a255bdc757f1d3e9e1e8a4e2a
- git.kernel.org/stable/c/89a9c1bc7d797120bcc290864e0cb10a440a677f
- git.kernel.org/stable/c/a4f4371d194dfa5473cc961f86194084b1b13a69
- git.kernel.org/stable/c/af7307e96dad00bcc2675dac650d8558a52f2c6f
- git.kernel.org/stable/c/bbb15e71156cd9f5e1869eee7207a06ea8e96c39
- git.kernel.org/stable/c/f632987306bce9242cdfcf911ee0b2c9455e05a3
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.2 ≤ v < 6.6.136, 6.7 ≤ v < 6.12.83, 6.13 ≤ v < 6.18.24, 6.19 ≤ v < 6.19.14, 7.0 ≤ v < 7.0.1 | 6.6.136, 6.12.83, 6.18.24, 6.19.14, 7.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.