Double Free Vulnerability in Linux Kernel Affecting BCMASP Driver

CVE-2026-31506

What is CVE-2026-31506?

A vulnerability in the Linux kernel's BCMASP driver was identified, which involved a double free of the WoL (Wake on LAN) interrupt request (irq). This issue arose because the irq was incorrectly freed, despite being instantiated with the devm_request_irq() function. The devm_request_irq() function automatically manages the freeing of the raw memory, which could lead to potential security issues and instability. The vulnerability has been addressed to ensure that the irq is not manually freed, allowing the driver's memory management to work as intended.

References