CVE Explorer

CVE-2026-31621

In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliary_device_add() fails, the error block calls auxiliary_device_uninit() but does not return. The uninit drops the last reference and synchronously runs bnge_aux_dev_release(), which sets bd->auxr_dev = NULL and frees the underlying object. The subsequent bd->auxr_dev->net = bd->netdev then dereferences NULL, which is not a good thing to have happen when tr

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f73ac57e87efe41b7e00a3893f71dae07b46aab62ab17655a7f15ce404d712cd

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/broadcom/bnge/bnge_auxr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"38c383ec6d37f4b5597f8e6a1f5c2ab31ea01d3a","status":"affected","version":"8ac050ec3b1c0dcb5e89cf86fe2ebe0afcc73554","versionType":"git"},{"lessThan":"87bc3557c708110d83086bf091328271298a44e3","status":"affected","version":"8ac050ec3b1c0dcb5e89cf86fe2ebe0afcc73554","versionType":"git"},{"lessThan":"8b0c25528cb64f71a73b5c0d49cbbcb68540a4ce","status":"affected","version":…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/broadcom/bnge/bnge_auxr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.14","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.1","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"origin…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/affected/1

Source references

3 source assertions

{"url":"https://git.kernel.org/stable/c/38c383ec6d37f4b5597f8e6a1f5c2ab31ea01d3a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/87bc3557c708110d83086bf091328271298a44e3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/8b0c25528cb64f71a73b5c0d49cbbcb68540a4ce"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:97e2bb72ae718867e5d453488ac45cefc65e24c4f81193631e208db46b9669c7 · sha256:89e74b2a66e9879f… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer