CVE-2026-31621
MediumSummary
In the Linux kernel, the bnge driver has a vulnerability where a return statement is missing after auxiliary_device_uninit() in the error path. After auxiliary_device_add() fails, execution continues, potentially leading to use-after-free.
Risk Assessment
The risk includes potential use-after-free, which could cause system crashes or privilege escalation by a local attacker.
Recommendation
Immediately update the Linux kernel to a version containing the fix that adds a return statement after auxiliary_device_uninit() in the error path.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliary_device_add() fails, the error block calls auxiliary_device_uninit() but does not return. The uninit drops the last reference and synchronously runs bnge_au