[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31576":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":30,"related":31,"reserved_at":9,"published_at":35,"modified_at":36,"state":37,"summary":38,"references_raw":47,"kevs":86,"epss":87,"epss_history":90,"metrics":213,"affected":219},"CVE-2026-31576","In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: hackrf: fix to not free memory after the device is registered in hackrf_probe()\n\nIn hackrf driver, the following race condition occurs:\n```\n\t\tCPU0\t\t\t\t\t\tCPU1\nhackrf_probe()\n  kzalloc(); // alloc hackrf_dev\n  ....\n  v4l2_device_register();\n  ....\n\t\t\t\t\t\tfd = sys_open(\"/path/to/dev\"); // open hackrf fd\n\t\t\t\t\t\t....\n  v4l2_device_unregister();\n  ....\n  kfree(); // free hackrf_dev\n  ....\n\t\t\t\t\t\tsys_ioctl(fd, ...);\n\t\t\t\t\t\t  v4l2_ioctl();\n\t\t\t\t\t\t    video_is_registered() // UAF!!\n\t\t\t\t\t\t....\n\t\t\t\t\t\tsys_close(fd);\n\t\t\t\t\t\t  v4l2_release() // UAF!!\n\t\t\t\t\t\t    hackrf_video_release()\n\t\t\t\t\t\t      kfree(); // DFB!!\n```\n\nWhen a V4L2 or video device is unregistered, the device node is removed so\nnew open() calls are blocked.\n\nHowever, file descriptors that are already open-and any in-flight I/O-do\nnot terminate immediately; they remain valid until the last reference is\ndropped and the driver's release() is invoked.\n\nTherefore, freeing device memory on the error path after hackrf_probe()\nhas registered dev it will lead to a race to use-after-free vuln, since\nthose already-open handles haven't been released yet.\n\nAnd since release() free memory too, race to use-after-free and\ndouble-free vuln occur.\n\nTo prevent this, if device is registered from probe(), it should be\nmodified to free memory only through release() rather than calling\nkfree() directly.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28],{"_key":25},"DEBIAN-CVE-2026-31576",{"_key":27},"OPENSUSE-SU-2026:10703-1",{"_key":29},"UBUNTU-CVE-2026-31576",[],[32,33],{"_key":27},{"_key":34},"CGA-HWHC-RJV4-H7FP","2026-04-24T14:42:08.188Z","2026-06-01T16:11:46.483Z","Modified",{"cisa_kev":39,"cisa_ransomware":39,"cisa_vendor":9,"epss_severity":40,"epss_score":41,"severity":42,"severity_score":43,"severity_version":44,"severity_source":45,"severity_vector":46,"severity_status":37},false,"low",0.00014,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[48,54,58,62,66,70,74,78,82],{"url":49,"sources":50,"tags":52},"https://git.kernel.org/stable/c/98a0a81ce78020c2522e0046f49d200de9778cb9",[51,45],"cve.org",[53],"Patch",{"url":55,"sources":56,"tags":57},"https://git.kernel.org/stable/c/07e9e674b6146b1f6fc41b1f54b8968bf2802824",[51,45],[53],{"url":59,"sources":60,"tags":61},"https://git.kernel.org/stable/c/2145c71a8044362e82e9923f001ba2aeb771b848",[51,45],[53],{"url":63,"sources":64,"tags":65},"https://git.kernel.org/stable/c/fcd1d70792a35c8a97414fe429f48311e41269c2",[51,45],[53],{"url":67,"sources":68,"tags":69},"https://git.kernel.org/stable/c/3b7da2b4d0fe014eff181ed37e3bf832eb8ed258",[51,45],[53],{"url":71,"sources":72,"tags":73},"https://git.kernel.org/stable/c/45cbaf5c7cdc5386d86377f0daf94a17a007fed0",[51,45],[53],{"url":75,"sources":76,"tags":77},"https://git.kernel.org/stable/c/87b9685cca91ed715c39ba544715832d26a7f4b4",[51,45],[],{"url":79,"sources":80,"tags":81},"https://git.kernel.org/stable/c/131ec9046e1c8af101aebdaec4e8095e05f3312b",[51,45],[],{"url":83,"sources":84,"tags":85},"https://git.kernel.org/stable/c/67fd62e3efdc9dce01f76d95a745212f4feb38e6",[51,45],[],[],{"date":88,"score":41,"percentile":89},"2026-06-04",0.02632,[91,95,98,101,105,108,112,115,118,121,124,127,130,132,135,138,141,144,146,150,153,156,158,160,163,166,169,172,175,178,181,184,188,191,194,197,200,203,206,209,212],{"date":92,"score":93,"percentile":94},"2026-04-25",0.00018,0.04621,{"date":96,"score":93,"percentile":97},"2026-04-26",0.0462,{"date":99,"score":93,"percentile":100},"2026-04-27",0.04813,{"date":102,"score":103,"percentile":104},"2026-04-28",0.00012,0.01786,{"date":106,"score":103,"percentile":107},"2026-04-29",0.018,{"date":109,"score":110,"percentile":111},"2026-04-30",0.00013,0.02427,{"date":113,"score":110,"percentile":114},"2026-05-01",0.02426,{"date":116,"score":110,"percentile":117},"2026-05-02",0.0241,{"date":119,"score":110,"percentile":120},"2026-05-03",0.02415,{"date":122,"score":110,"percentile":123},"2026-05-04",0.02408,{"date":125,"score":110,"percentile":126},"2026-05-05",0.02396,{"date":128,"score":110,"percentile":129},"2026-05-06",0.02388,{"date":131,"score":110,"percentile":117},"2026-05-07",{"date":133,"score":110,"percentile":134},"2026-05-08",0.02422,{"date":136,"score":110,"percentile":137},"2026-05-09",0.0245,{"date":139,"score":110,"percentile":140},"2026-05-10",0.02447,{"date":142,"score":110,"percentile":143},"2026-05-11",0.02445,{"date":145,"score":110,"percentile":137},"2026-05-12",{"date":147,"score":148,"percentile":149},"2026-05-13",0.00016,0.03678,{"date":151,"score":148,"percentile":152},"2026-05-14",0.03693,{"date":154,"score":110,"percentile":155},"2026-05-15",0.01964,{"date":157,"score":110,"percentile":155},"2026-05-16",{"date":159,"score":110,"percentile":155},"2026-05-17",{"date":161,"score":110,"percentile":162},"2026-05-18",0.0195,{"date":164,"score":110,"percentile":165},"2026-05-19",0.0194,{"date":167,"score":110,"percentile":168},"2026-05-20",0.01935,{"date":170,"score":110,"percentile":171},"2026-05-21",0.01926,{"date":173,"score":110,"percentile":174},"2026-05-22",0.02057,{"date":176,"score":110,"percentile":177},"2026-05-23",0.02053,{"date":179,"score":110,"percentile":180},"2026-05-24",0.02049,{"date":182,"score":110,"percentile":183},"2026-05-25",0.02036,{"date":185,"score":186,"percentile":187},"2026-05-26",0.00015,0.03042,{"date":189,"score":186,"percentile":190},"2026-05-27",0.03063,{"date":192,"score":186,"percentile":193},"2026-05-28",0.03045,{"date":195,"score":186,"percentile":196},"2026-05-29",0.03047,{"date":198,"score":186,"percentile":199},"2026-05-30",0.03073,{"date":201,"score":186,"percentile":202},"2026-05-31",0.03057,{"date":204,"score":186,"percentile":205},"2026-06-01",0.03024,{"date":207,"score":41,"percentile":208},"2026-06-02",0.02644,{"date":210,"score":41,"percentile":211},"2026-06-03",0.02633,{"date":88,"score":41,"percentile":89},[214],{"source":45,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":215,"cvss_v4_0":9},{"baseScore":43,"baseSeverity":216,"vectorString":46,"impactScore":217,"exploitabilityScore":218},"HIGH",9.8,4.6,[220,267],{"ecosystem":9,"name":221,"vendor":222,"product":222,"cpe_part":223,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":224},"Linux","linux","a",[225,232,235,238,241,245,248,251,254,256,258,260,262,265],{"version":226,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":230,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 98a0a81ce78020c2522e0046f49d200de9778cb9",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","98a0a81ce78020c2522e0046f49d200de9778cb9","excluding",{"version":233,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":234,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 07e9e674b6146b1f6fc41b1f54b8968bf2802824","07e9e674b6146b1f6fc41b1f54b8968bf2802824",{"version":236,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":237,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 2145c71a8044362e82e9923f001ba2aeb771b848","2145c71a8044362e82e9923f001ba2aeb771b848",{"version":239,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":240,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C fcd1d70792a35c8a97414fe429f48311e41269c2","fcd1d70792a35c8a97414fe429f48311e41269c2",{"version":242,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":244,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 87b9685cca91ed715c39ba544715832d26a7f4b4","8bc4a9ed85046c214458c9e82aea75d2f46cfffd","87b9685cca91ed715c39ba544715832d26a7f4b4",{"version":246,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":247,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 131ec9046e1c8af101aebdaec4e8095e05f3312b","131ec9046e1c8af101aebdaec4e8095e05f3312b",{"version":249,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":250,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 67fd62e3efdc9dce01f76d95a745212f4feb38e6","67fd62e3efdc9dce01f76d95a745212f4feb38e6",{"version":252,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":253,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 45cbaf5c7cdc5386d86377f0daf94a17a007fed0","45cbaf5c7cdc5386d86377f0daf94a17a007fed0",{"version":255,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":230,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 98a0a81ce78020c2522e0046f49d200de9778cb9",{"version":257,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":234,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 07e9e674b6146b1f6fc41b1f54b8968bf2802824",{"version":259,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":237,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 2145c71a8044362e82e9923f001ba2aeb771b848",{"version":261,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":240,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C fcd1d70792a35c8a97414fe429f48311e41269c2",{"version":263,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":264,"version_end_type":231,"fixed_in":9},">= 8bc4a9ed85046c214458c9e82aea75d2f46cfffd, \u003C 3b7da2b4d0fe014eff181ed37e3bf832eb8ed258","3b7da2b4d0fe014eff181ed37e3bf832eb8ed258",{"version":266,"is_range":39,"range_type":51,"version_start":266,"version_start_type":229,"version_end":266,"version_end_type":229,"fixed_in":9},"4.4",{"ecosystem":9,"name":268,"vendor":222,"product":269,"cpe_part":270,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":271},"linux kernel","linux_kernel","o",[272,276,280,284,288],{"version":273,"is_range":227,"range_type":274,"version_start":9,"version_start_type":9,"version_end":275,"version_end_type":231,"fixed_in":9},"lt6.6.136","cpe","6.6.136",{"version":277,"is_range":227,"range_type":274,"version_start":278,"version_start_type":229,"version_end":279,"version_end_type":231,"fixed_in":9},"gte6.7_lt6.12.83","6.7","6.12.83",{"version":281,"is_range":227,"range_type":274,"version_start":282,"version_start_type":229,"version_end":283,"version_end_type":231,"fixed_in":9},"gte6.13_lt6.18.24","6.13","6.18.24",{"version":285,"is_range":227,"range_type":274,"version_start":286,"version_start_type":229,"version_end":287,"version_end_type":231,"fixed_in":9},"gte6.19_lt6.19.14","6.19","6.19.14",{"version":289,"is_range":227,"range_type":274,"version_start":290,"version_start_type":229,"version_end":291,"version_end_type":231,"fixed_in":9},"gte7.0_lt7.0.1","7.0","7.0.1"]