Kernel Security Flaw in Linux Affects Multiple Products

CVE-2026-31670

What is CVE-2026-31670?

A vulnerability in the Linux kernel allows userspace to generate an unrestricted number of rfkill events. If the system is improperly configured and these events are not processed from the rfkill file descriptor, this can lead to a significant out-of-memory situation. To mitigate this risk, it's important to limit the number of pending rfkill events to a large number, specifically 1000, thereby preventing potential exploitations that could destabilize the system.

References