CVE-2026-31672

wifi: rt2x00usb: fix devres lifetime

State: Published
Severity: Not scored
Published: Apr 24, 2026
Updated: May 11, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rt2x00usb: fix devres lifetime

USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes).

Fix the USB anchor lifetime so that it is released on driver unbind.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 64a457f6afbf15f984d95201a9a1e71eed3f9dd1Affected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 65518a6965d527c53013947031f26754f6a4f6afAffected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 15b233e33b35b927bd8d0044c15325564ea1ba24Affected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 1de5c76bf40e9cdeebf54662f63011fb10fa452fAffected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before b245db719bc7e57abf48bd5701662b270c3880f7Affected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before e360d15fcb1e819eef49e3d4434d8050542eed16Affected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before c99f198841b41735796e2ddfcd573783fb552eb9Affected 8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 25369b22223d1c56e42a0cd4ac9137349d5a898eAffected
LinuxLinux	4.7Affected before 4.7Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.169 through 6.1.Not affected 6.6.135 through 6.6.Not affected 6.12.82 through 6.12.Not affected 6.18.23 through 6.18.Not affected 6.19.13 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 64a457f6afbf15f984d95201a9a1e71eed3f9dd1Affected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 65518a6965d527c53013947031f26754f6a4f6afAffected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 15b233e33b35b927bd8d0044c15325564ea1ba24Affected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 1de5c76bf40e9cdeebf54662f63011fb10fa452fAffected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before b245db719bc7e57abf48bd5701662b270c3880f7Affected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before e360d15fcb1e819eef49e3d4434d8050542eed16Affected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before c99f198841b41735796e2ddfcd573783fb552eb9Affected
8b4c0009313f3d42e2540e3e1f776097dd0db73d to before 25369b22223d1c56e42a0cd4ac9137349d5a898eAffected

LinuxLinux

4.7Affected
before 4.7Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.169 through 6.1.*Not affected
6.6.135 through 6.6.*Not affected
6.12.82 through 6.12.*Not affected
6.18.23 through 6.18.*Not affected
6.19.13 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.