CVE-2026-31552 (GCVE-0-2026-31552)

Vulnerability from cvelistv5 – Published: 2026-04-24 14:33 – Updated: 2026-08-05 12:23
VLAI
Title
wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Since upstream commit e75665dd0968 ("wifi: wlcore: ensure skb headroom before skb_push"), wl1271_tx_allocate() and with it wl1271_prepare_tx_frame() returns -EAGAIN if pskb_expand_head() fails. However, in wlcore_tx_work_locked(), a return value of -EAGAIN from wl1271_prepare_tx_frame() is interpreted as the aggregation buffer being full. This causes the code to flush the buffer, put the skb back at the head of the queue, and immediately retry the same skb in a tight while loop. Because wlcore_tx_work_locked() holds wl->mutex, and the retry happens immediately with GFP_ATOMIC, this will result in an infinite loop and a CPU soft lockup. Return -ENOMEM instead so the packet is dropped and the loop terminates. The problem was found by an experimental code review agent based on gemini-3.1-pro while reviewing backports into v6.18.y.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 88295a55fefe5414e64293638b6f7549646e58ed , < 980f793645540ca7a6318165cc12f49d5febeb99 (git)
Affected: cd89a4656c03f8db0c57350aaec69cd3cfaa3522 , < 12f9eef39e49716c763714bfda835a733d5f6dea (git)
Affected: 745a0810dbc96a0471e5f5e627ba1e978c3116d4 , < ceb46b40b021d21911ff8608ce4ed33c1264ad2f (git)
Affected: b167312390fdd461c81ead516f2b0b44e83a9edb , < a6dc74209462c4fe5a88718d2f3a5286886081c8 (git)
Affected: 71de0b6e04bbee5575caf9a1e4d424e7dcc50018 , < cfa64e2b3717be1da7c4c1aff7268a009e8c1610 (git)
Affected: 689a7980e4788e13e766763d53569fb78dea2513 , < 46c670ff1ff466e5eccb3940f726586473dc053c (git)
Affected: e75665dd096819b1184087ba5718bd93beafff51 , < f2c06d718a7b85cbc59ceaa2ff3f46b178ac709c (git)
Affected: e75665dd096819b1184087ba5718bd93beafff51 , < deb353d9bb009638b7762cae2d0b6e8fdbb41a69 (git)
Affected: 5.10.250 , < 5.10.253 (semver)
Affected: 5.15.200 , < 5.15.203 (semver)
Affected: 6.1.163 , < 6.1.167 (semver)
Affected: 6.6.124 , < 6.6.130 (semver)
Affected: 6.12.70 , < 6.12.78 (semver)
Affected: 6.18.10 , < 6.18.20 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.19
Unaffected: 0 , < 6.19 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.20 , ≤ 6.18.* (semver)
Unaffected: 6.19.10 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/ti/wlcore/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "980f793645540ca7a6318165cc12f49d5febeb99",
              "status": "affected",
              "version": "88295a55fefe5414e64293638b6f7549646e58ed",
              "versionType": "git"
            },
            {
              "lessThan": "12f9eef39e49716c763714bfda835a733d5f6dea",
              "status": "affected",
              "version": "cd89a4656c03f8db0c57350aaec69cd3cfaa3522",
              "versionType": "git"
            },
            {
              "lessThan": "ceb46b40b021d21911ff8608ce4ed33c1264ad2f",
              "status": "affected",
              "version": "745a0810dbc96a0471e5f5e627ba1e978c3116d4",
              "versionType": "git"
            },
            {
              "lessThan": "a6dc74209462c4fe5a88718d2f3a5286886081c8",
              "status": "affected",
              "version": "b167312390fdd461c81ead516f2b0b44e83a9edb",
              "versionType": "git"
            },
            {
              "lessThan": "cfa64e2b3717be1da7c4c1aff7268a009e8c1610",
              "status": "affected",
              "version": "71de0b6e04bbee5575caf9a1e4d424e7dcc50018",
              "versionType": "git"
            },
            {
              "lessThan": "46c670ff1ff466e5eccb3940f726586473dc053c",
              "status": "affected",
              "version": "689a7980e4788e13e766763d53569fb78dea2513",
              "versionType": "git"
            },
            {
              "lessThan": "f2c06d718a7b85cbc59ceaa2ff3f46b178ac709c",
              "status": "affected",
              "version": "e75665dd096819b1184087ba5718bd93beafff51",
              "versionType": "git"
            },
            {
              "lessThan": "deb353d9bb009638b7762cae2d0b6e8fdbb41a69",
              "status": "affected",
              "version": "e75665dd096819b1184087ba5718bd93beafff51",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.253",
              "status": "affected",
              "version": "5.10.250",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.203",
              "status": "affected",
              "version": "5.15.200",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.167",
              "status": "affected",
              "version": "6.1.163",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.130",
              "status": "affected",
              "version": "6.6.124",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.78",
              "status": "affected",
              "version": "6.12.70",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18.20",
              "status": "affected",
              "version": "6.18.10",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/ti/wlcore/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.19"
            },
            {
              "lessThan": "6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "5.10.250",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.15.200",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "6.1.163",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "6.6.124",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "6.12.70",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.20",
                  "versionStartIncluding": "6.18.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.10",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom\n\nSince upstream commit e75665dd0968 (\"wifi: wlcore: ensure skb headroom\nbefore skb_push\"), wl1271_tx_allocate() and with it\nwl1271_prepare_tx_frame() returns -EAGAIN if pskb_expand_head() fails.\nHowever, in wlcore_tx_work_locked(), a return value of -EAGAIN from\nwl1271_prepare_tx_frame() is interpreted as the aggregation buffer being\nfull. This causes the code to flush the buffer, put the skb back at the\nhead of the queue, and immediately retry the same skb in a tight while\nloop.\n\nBecause wlcore_tx_work_locked() holds wl-\u003emutex, and the retry happens\nimmediately with GFP_ATOMIC, this will result in an infinite loop and a\nCPU soft lockup. Return -ENOMEM instead so the packet is dropped and\nthe loop terminates.\n\nThe problem was found by an experimental code review agent based on\ngemini-3.1-pro while reviewing backports into v6.18.y."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - Remote network traffic can cause an affected wlcore-backed host or embedded device to transmit packets through the vulnerable TX path, and an adjacent WiFi attacker can also trigger AP/P2P management/data transmissions. Scoring uses the highest reasonable deployment where the device is reachable over IP via WiFi.\nAC:L - Once `pskb_expand_head()` fails for an skb with insufficient headroom, the erroneous `-EAGAIN` handling deterministically requeues and immediately retries the same skb in a tight loop. There is no race to win, and traffic flooding can sustain the TX/allocation pressure.\nPR:N - An attacker does not need local credentials to induce network or WiFi-originated transmissions in a reachable AP/station/embedded deployment. The vulnerable driver path itself has no authentication or privilege check once packets are queued for transmission.\nUI:N - No victim user action is required after the affected WiFi interface is operating. Attacker-supplied traffic can trigger the transmit path automatically.\nS:U - The impact is confined to the same kernel and device security authority. There is no VM, IOMMU, or separate security-scope boundary crossing.\nC:N - The fixed bug is an error-code confusion that causes an infinite retry loop after allocation failure. The failing `pskb_expand_head()` leaves the skb unmodified and does not provide an information disclosure primitive.\nI:N - The bug does not corrupt memory or modify attacker-chosen data; it requeues the same skb and spins. No arbitrary write or control-flow primitive is exposed by this issue.\nA:H - The loop runs immediately under `wl-\u003emutex` with `GFP_ATOMIC` retry and can cause a CPU soft lockup. This is a kernel-level availability failure and can hang or severely degrade affected systems."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:23:26.516Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/980f793645540ca7a6318165cc12f49d5febeb99"
        },
        {
          "url": "https://git.kernel.org/stable/c/12f9eef39e49716c763714bfda835a733d5f6dea"
        },
        {
          "url": "https://git.kernel.org/stable/c/ceb46b40b021d21911ff8608ce4ed33c1264ad2f"
        },
        {
          "url": "https://git.kernel.org/stable/c/a6dc74209462c4fe5a88718d2f3a5286886081c8"
        },
        {
          "url": "https://git.kernel.org/stable/c/cfa64e2b3717be1da7c4c1aff7268a009e8c1610"
        },
        {
          "url": "https://git.kernel.org/stable/c/46c670ff1ff466e5eccb3940f726586473dc053c"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2c06d718a7b85cbc59ceaa2ff3f46b178ac709c"
        },
        {
          "url": "https://git.kernel.org/stable/c/deb353d9bb009638b7762cae2d0b6e8fdbb41a69"
        }
      ],
      "title": "wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31552",
    "datePublished": "2026-04-24T14:33:19.065Z",
    "dateReserved": "2026-03-09T15:48:24.115Z",
    "dateUpdated": "2026-08-05T12:23:26.516Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-31552",
      "date": "2026-08-18",
      "epss": "0.00501",
      "percentile": "0.40628"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-31552\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-04-24T15:16:29.497\",\"lastModified\":\"2026-06-17T10:33:57.827\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom\\n\\nSince upstream commit e75665dd0968 (\\\"wifi: wlcore: ensure skb headroom\\nbefore skb_push\\\"), wl1271_tx_allocate() and with it\\nwl1271_prepare_tx_frame() returns -EAGAIN if pskb_expand_head() fails.\\nHowever, in wlcore_tx_work_locked(), a return value of -EAGAIN from\\nwl1271_prepare_tx_frame() is interpreted as the aggregation buffer being\\nfull. This causes the code to flush the buffer, put the skb back at the\\nhead of the queue, and immediately retry the same skb in a tight while\\nloop.\\n\\nBecause wlcore_tx_work_locked() holds wl-\u003emutex, and the retry happens\\nimmediately with GFP_ATOMIC, this will result in an infinite loop and a\\nCPU soft lockup. Return -ENOMEM instead so the packet is dropped and\\nthe loop terminates.\\n\\nThe problem was found by an experimental code review agent based on\\ngemini-3.1-pro while reviewing backports into v6.18.y.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/wireless/ti/wlcore/tx.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"88295a55fefe5414e64293638b6f7549646e58ed\",\"lessThan\":\"980f793645540ca7a6318165cc12f49d5febeb99\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd89a4656c03f8db0c57350aaec69cd3cfaa3522\",\"lessThan\":\"12f9eef39e49716c763714bfda835a733d5f6dea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"745a0810dbc96a0471e5f5e627ba1e978c3116d4\",\"lessThan\":\"ceb46b40b021d21911ff8608ce4ed33c1264ad2f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b167312390fdd461c81ead516f2b0b44e83a9edb\",\"lessThan\":\"a6dc74209462c4fe5a88718d2f3a5286886081c8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"71de0b6e04bbee5575caf9a1e4d424e7dcc50018\",\"lessThan\":\"cfa64e2b3717be1da7c4c1aff7268a009e8c1610\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"689a7980e4788e13e766763d53569fb78dea2513\",\"lessThan\":\"46c670ff1ff466e5eccb3940f726586473dc053c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e75665dd096819b1184087ba5718bd93beafff51\",\"lessThan\":\"f2c06d718a7b85cbc59ceaa2ff3f46b178ac709c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e75665dd096819b1184087ba5718bd93beafff51\",\"lessThan\":\"deb353d9bb009638b7762cae2d0b6e8fdbb41a69\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.250\",\"lessThan\":\"5.10.253\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.200\",\"lessThan\":\"5.15.203\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.163\",\"lessThan\":\"6.1.167\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.124\",\"lessThan\":\"6.6.130\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.70\",\"lessThan\":\"6.12.78\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.18.10\",\"lessThan\":\"6.18.20\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/wireless/ti/wlcore/tx.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.20\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.10\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.250\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"66E4302C-5EB9-4984-983B-20CA9FFA4B97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.200\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"63DFD51E-A9F5-4387-ABA4-525154CD3972\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.163\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"73CD421D-F2A3-4142-A9A2-47683BB9ABD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.124\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C1C9B72D-1F0E-488D-AE95-ADE16C092AF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12.70\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"0126FC39-C23D-40D2-BC7F-4692652C4520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.18.10\",\"versionEndExcluding\":\"6.18.20\",\"matchCriteriaId\":\"E3BAA8AC-B2CC-40BC-AFBE-379025E7EF3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19.1\",\"versionEndExcluding\":\"6.19.10\",\"matchCriteriaId\":\"D70DEFFE-AC47-4F3A-A2B2-2D67AB4CF3C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"35C8A871-4971-433E-A046-FC9F7B7D190A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"512EE3A8-A590-4501-9A94-5D4B268D6138\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/12f9eef39e49716c763714bfda835a733d5f6dea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/46c670ff1ff466e5eccb3940f726586473dc053c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/980f793645540ca7a6318165cc12f49d5febeb99\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a6dc74209462c4fe5a88718d2f3a5286886081c8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ceb46b40b021d21911ff8608ce4ed33c1264ad2f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cfa64e2b3717be1da7c4c1aff7268a009e8c1610\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/deb353d9bb009638b7762cae2d0b6e8fdbb41a69\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f2c06d718a7b85cbc59ceaa2ff3f46b178ac709c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T13:40:45+00:00",
      "cve": "CVE-2026-31552",
      "id": "CVE-2026-31552",
      "initial_release_date": "2026-04-24T00:00:00+00:00",
      "product_status:known_affected": "14",
      "product_status:known_not_affected": "260",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31552.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-22T00:07:11Z",
      "cve": "CVE-2026-31552",
      "id": "CVE-2026-31552",
      "initial_release_date": "2026-04-25T01:39:39Z",
      "product_status:known_not_affected": "258",
      "product_status:recommended": "98",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-31552",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-31552.json",
      "version": "6"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.