Description
In the Linux kernel, the following vulnerability has been resolved:

net: bcmasp: fix double free of WoL irq

We do not need to free wol_irq since it was instantiated with
devm_request_irq(). So devres will free for us.
Published: 2026-04-22
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Potential Denial of Service, inferred from the double‑free bug
Action: Apply Patch
AI Analysis

Impact

The Linux kernel bcmasp driver had a double‑free bug involving the WoL IRQ resource. Because the IRQ was allocated with devm_request_irq, the device resource manager would automatically free it, making the manual free call redundant. The double free corresponds to CWE‑415 (Double Free). Removing the erroneous free prevents this undefined behavior, thereby addressing the core weakness in the driver.

Affected Systems

Linux kernel installations that include the bcmasp driver may be vulnerable. No specific kernel version range is listed, but any kernel containing the bcmasp driver before the commit 121a6ad9cd42ba3bfc57deae93e3326515c2afe1 could be impacted.

Risk and Exploitability

The EPSS score is <1%, and the issue is not listed in the CISA KEV catalog. Based on the description, the CVSS score of 7.8 indicates that a double free could potentially lead to kernel crashes or memory corruption. It is inferred that exploitation would likely require manipulating the bcmasp driver's WoL functionality, implying local access to the affected machine.

Generated by OpenCVE AI on April 29, 2026 at 03:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the kernel patch that removes the double‑free error, directly fixing the CWE‑415 weakness.
  • If updating the kernel is not possible, disable Wake‑on‑LAN for the affected NIC devices to avoid executing the buggy code that could trigger a double‑free (CWE‑415).
  • If the bcmasp driver is not required in your environment, unload or blacklist the driver to prevent the double free from being exercised.

Generated by OpenCVE AI on April 29, 2026 at 03:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6238-1 linux security update
History

Wed, 29 Apr 2026 02:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Tue, 28 Apr 2026 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-415
CPEs cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 27 Apr 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Thu, 23 Apr 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1341
References

Wed, 22 Apr 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devres will free for us.
Title net: bcmasp: fix double free of WoL irq
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-11T22:10:06.275Z

Reserved: 2026-03-09T15:48:24.105Z

Link: CVE-2026-31506

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-04-22T14:16:49.397

Modified: 2026-04-28T15:05:54.367

Link: CVE-2026-31506

cve-icon Redhat

Severity :

Publid Date: 2026-04-22T00:00:00Z

Links: CVE-2026-31506 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-29T04:00:13Z

Weaknesses