CVE-2026-31670

net: rfkill: prevent unlimited numbers of rfkill events from being created

State: Published
Severity: Not scored
Published: Apr 24, 2026
Updated: Oct 15, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: rfkill: prevent unlimited numbers of rfkill events from being created

Userspace can create an unlimited number of rfkill events if the system is so configured, while not consuming them from the rfkill file descriptor, causing a potential out of memory situation. Prevent this from bounding the number of pending rfkill events at a "large" number (i.e. 1000) to prevent abuses like this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c64fb01627e24725d1f9d535e4426475a4415753 to before 4bcd1615a4e2a185ae9edd27b4143d7dfa7134f4Affected c64fb01627e24725d1f9d535e4426475a4415753 to before b1e0c8d3ab58a0161db487bf5fc47adfcaf5d5caAffected c64fb01627e24725d1f9d535e4426475a4415753 to before e3842779547c83150569071d9980517cc9029fc0Affected c64fb01627e24725d1f9d535e4426475a4415753 to before 673d2a3eef6e0ee9736501a150c9e4024a4e60a6Affected c64fb01627e24725d1f9d535e4426475a4415753 to before 82843afc19012a29ba863961ef494165aa1a88f4Affected c64fb01627e24725d1f9d535e4426475a4415753 to before a8c26800e0220e1550af012f5a20e50f5c78864dAffected c64fb01627e24725d1f9d535e4426475a4415753 to before 80ce4cb026f0a4c4532b6cad827b44debda6256aAffected c64fb01627e24725d1f9d535e4426475a4415753 to before ea245d78dec594372e27d8c79616baf49e98a4a1Affected
LinuxLinux	2.6.31Affected before 2.6.31Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.169 through 6.1.Not affected 6.6.135 through 6.6.Not affected 6.12.82 through 6.12.Not affected 6.18.23 through 6.18.Not affected 6.19.13 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

c64fb01627e24725d1f9d535e4426475a4415753 to before 4bcd1615a4e2a185ae9edd27b4143d7dfa7134f4Affected
c64fb01627e24725d1f9d535e4426475a4415753 to before b1e0c8d3ab58a0161db487bf5fc47adfcaf5d5caAffected
c64fb01627e24725d1f9d535e4426475a4415753 to before e3842779547c83150569071d9980517cc9029fc0Affected
c64fb01627e24725d1f9d535e4426475a4415753 to before 673d2a3eef6e0ee9736501a150c9e4024a4e60a6Affected
c64fb01627e24725d1f9d535e4426475a4415753 to before 82843afc19012a29ba863961ef494165aa1a88f4Affected
c64fb01627e24725d1f9d535e4426475a4415753 to before a8c26800e0220e1550af012f5a20e50f5c78864dAffected
c64fb01627e24725d1f9d535e4426475a4415753 to before 80ce4cb026f0a4c4532b6cad827b44debda6256aAffected
c64fb01627e24725d1f9d535e4426475a4415753 to before ea245d78dec594372e27d8c79616baf49e98a4a1Affected

LinuxLinux

2.6.31Affected
before 2.6.31Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.169 through 6.1.*Not affected
6.6.135 through 6.6.*Not affected
6.12.82 through 6.12.*Not affected
6.18.23 through 6.18.*Not affected
6.19.13 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.