{
  "cveId": "CVE-2026-31695",
  "url": "https://patchblox.com/security/cve/CVE-2026-31695",
  "summary": "CVE-2026-31695 is fixed in 41 products on 1 platform, first by ALAS2023-2026-1681, released May 11, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: virt_wifi: remove SET_NETDEV_DEV to avoid...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free  Currently we execute \u0060SET_NETDEV_DEV(dev, \u0026priv-\u003Elowerdev-\u003Edev)\u0060 for the virt_wifi net devices. However, unregistering a virt_wifi device in netdev_run_todo() can happen together with the device referenced by SET_NETDEV_DEV().  It can result in use-after-free during the ethtool operations performed on a virt_wifi device that is currently being unregistered. Such a net device can have the \u0060dev.parent\u0060 field pointing to the freed memory, but ethnl_ops_begin() calls \u0060pm_runtime_get_sync(dev-\u003Edev.parent)\u0060.  Let\u0027s remove SET_NETDEV_DEV for virt_wifi to avoid bugs like this:   ==================================================================  BUG: KASAN: slab-use-after-free in __pm_runtime_resume\u002B0xe2/0xf0  Read of size 2 at addr ffff88810cfc46f8 by task pm/606   Call Trace:   \u003CTASK\u003E   dump_stack_lvl\u002B0x4d/0x70   print_report\u002B0x170/0x4f3   ? __pfx__raw_spin_lock_irqsave\u002B0x10/0x10   kasan_report\u002B0xda/0x110   ? __pm_runtime_resume\u002B0xe2/0xf0   ? __pm_runtime_resume\u002B0xe2/0xf0   __pm_runtime_resume\u002B0xe2/0xf0   ethnl_ops_begin\u002B0x49/0x270   ethnl_set_features\u002B0x23c/0xab0   ? __pfx_ethnl_set_features\u002B0x10/0x10   ? kvm_sched_clock_read\u002B0x11/0x20   ? local_clock_noinstr\u002B0xf/0xf0   ? local_clock\u002B0x10/0x30   ? kasan_save_track\u002B0x25/0x60   ? __kasan_kmalloc\u002B0x7f/0x90   ? genl_family_rcv_msg_attrs_parse.isra.0\u002B0x150/0x2c0   genl_family_rcv_msg_doit\u002B0x1e7/0x2c0   ? __pfx_genl_family_rcv_msg_doit\u002B0x10/0x10   ? __pfx_cred_has_capability.isra.0\u002B0x10/0x10   ? stack_trace_save\u002B0x8e/0xc0   genl_rcv_msg\u002B0x411/0x660   ? __pfx_genl_rcv_msg\u002B0x10/0x10   ? __pfx_ethnl_set_features\u002B0x10/0x10   netlink_rcv_skb\u002B0x121/0x380   ? __pfx_genl_rcv_msg\u002B0x10/0x10   ? __pfx_netlink_rcv_skb\u002B0x10/0x10   ? __pfx_down_read\u002B0x10/0x10   genl_rcv\u002B0x23/0x30   netlink_unicast\u002B0x60f/0x830   ? __pfx_netlink_unicast\u002B0x10/0x10   ? __pfx___alloc_skb\u002B0x10/0x10   netlink_sendmsg\u002B0x6ea/0xbc0   ? __pfx_netlink_sendmsg\u002B0x10/0x10   ? __futex_queue\u002B0x10b/0x1f0   ____sys_sendmsg\u002B0x7a2/0x950   ? copy_msghdr_from_user\u002B0x26b/0x430   ? __pfx_____sys_sendmsg\u002B0x10/0x10   ? __pfx_copy_msghdr_from_user\u002B0x10/0x10   ___sys_sendmsg\u002B0xf8/0x180   ? __pfx____sys_sendmsg\u002B0x10/0x10   ? __pfx_futex_wait\u002B0x10/0x10   ? fdget\u002B0x2e4/0x4a0   __sys_sendmsg\u002B0x11f/0x1c0   ? __pfx___sys_sendmsg\u002B0x10/0x10   do_syscall_64\u002B0xe2/0x570   ? exc_page_fault\u002B0x66/0xb0   entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f   \u003C/TASK\u003E  This fix may be combined with another one in the ethtool subsystem: https://lore.kernel.org/all/20260322075917.254874-1-alex.popov@linux.com/T/#u",
  "published": "2026-05-01T14:16:19Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00126,
  "epssPercentile": 0.02275,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.168-202.320",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.25-52.107",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.170-1",
      "fix": "DEBIAN-CVE-2026-31695",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31695",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.85-1",
      "fix": "DEBIAN-CVE-2026-31695",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31695",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.19.12-1",
      "fix": "DEBIAN-CVE-2026-31695",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31695",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.25-52.107.amzn2023",
      "fix": "ALAS2023-2026-1746",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1746",
      "released": "2026-05-25T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}