[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31578":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":30,"related":31,"reserved_at":9,"published_at":35,"modified_at":36,"state":37,"summary":38,"references_raw":47,"kevs":86,"epss":87,"epss_history":90,"metrics":213,"affected":219},"CVE-2026-31578","In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: as102: fix to not free memory after the device is registered in as102_usb_probe()\n\nIn as102_usb driver, the following race condition occurs:\n```\n\t\tCPU0\t\t\t\t\t\tCPU1\nas102_usb_probe()\n  kzalloc(); // alloc as102_dev_t\n  ....\n  usb_register_dev();\n\t\t\t\t\t\tfd = sys_open(\"/path/to/dev\"); // open as102 fd\n\t\t\t\t\t\t....\n  usb_deregister_dev();\n  ....\n  kfree(); // free as102_dev_t\n  ....\n\t\t\t\t\t\tsys_close(fd);\n\t\t\t\t\t\t  as102_release() // UAF!!\n\t\t\t\t\t\t    as102_usb_release()\n\t\t\t\t\t\t      kfree(); // DFB!!\n```\n\nWhen a USB character device registered with usb_register_dev() is later\nunregistered (via usb_deregister_dev() or disconnect), the device node is\nremoved so new open() calls fail. However, file descriptors that are\nalready open do not go away immediately: they remain valid until the last\nreference is dropped and the driver's .release() is invoked.\n\nIn as102, as102_usb_probe() calls usb_register_dev() and then, on an\nerror path, does usb_deregister_dev() and frees as102_dev_t right away.\nIf userspace raced a successful open() before the deregistration, that\nopen FD will later hit as102_release() --> as102_usb_release() and access\nor free as102_dev_t again, occur a race to use-after-free and\ndouble-free vuln.\n\nThe fix is to never kfree(as102_dev_t) directly once usb_register_dev()\nhas succeeded. After deregistration, defer freeing memory to .release().\n\nIn other words, let release() perform the last kfree when the final open\nFD is closed.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28],{"_key":25},"DEBIAN-CVE-2026-31578",{"_key":27},"OPENSUSE-SU-2026:10703-1",{"_key":29},"UBUNTU-CVE-2026-31578",[],[32,33],{"_key":27},{"_key":34},"CGA-8WHG-PH4J-HW9H","2026-04-24T14:42:09.519Z","2026-06-01T16:11:50.097Z","Modified",{"cisa_kev":39,"cisa_ransomware":39,"cisa_vendor":9,"epss_severity":40,"epss_score":41,"severity":42,"severity_score":43,"severity_version":44,"severity_source":45,"severity_vector":46,"severity_status":37},false,"low",0.00014,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[48,54,58,62,66,70,74,78,82],{"url":49,"sources":50,"tags":52},"https://git.kernel.org/stable/c/582fbecb3756330006fe1950762412a68c2cacd2",[51,45],"cve.org",[53],"Patch",{"url":55,"sources":56,"tags":57},"https://git.kernel.org/stable/c/09e9206008b887aa553733bd915d73131071a086",[51,45],[53],{"url":59,"sources":60,"tags":61},"https://git.kernel.org/stable/c/2eeae47a438694408189138048a786be99954032",[51,45],[53],{"url":63,"sources":64,"tags":65},"https://git.kernel.org/stable/c/7e5aedf6059cba2a669d86caeaf5a51f33ec85a1",[51,45],[53],{"url":67,"sources":68,"tags":69},"https://git.kernel.org/stable/c/8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c",[51,45],[53],{"url":71,"sources":72,"tags":73},"https://git.kernel.org/stable/c/cb8092038e95dc1113a68e63762de40fff61ba71",[51,45],[53],{"url":75,"sources":76,"tags":77},"https://git.kernel.org/stable/c/0d36653a3a821e5a974798adb347b3ea09332914",[51,45],[],{"url":79,"sources":80,"tags":81},"https://git.kernel.org/stable/c/25d500cf391e384356a612b85cf60b353ad3cd0c",[51,45],[],{"url":83,"sources":84,"tags":85},"https://git.kernel.org/stable/c/07ceb444c8f627cf863864d4274b5a77769725ed",[51,45],[],[],{"date":88,"score":41,"percentile":89},"2026-06-04",0.02632,[91,95,98,101,105,108,112,115,118,121,124,127,130,132,135,138,141,144,146,150,153,156,158,160,163,166,169,172,175,178,181,184,188,191,194,197,200,203,206,209,212],{"date":92,"score":93,"percentile":94},"2026-04-25",0.00018,0.04621,{"date":96,"score":93,"percentile":97},"2026-04-26",0.0462,{"date":99,"score":93,"percentile":100},"2026-04-27",0.04813,{"date":102,"score":103,"percentile":104},"2026-04-28",0.00012,0.01786,{"date":106,"score":103,"percentile":107},"2026-04-29",0.018,{"date":109,"score":110,"percentile":111},"2026-04-30",0.00013,0.02427,{"date":113,"score":110,"percentile":114},"2026-05-01",0.02426,{"date":116,"score":110,"percentile":117},"2026-05-02",0.0241,{"date":119,"score":110,"percentile":120},"2026-05-03",0.02415,{"date":122,"score":110,"percentile":123},"2026-05-04",0.02408,{"date":125,"score":110,"percentile":126},"2026-05-05",0.02396,{"date":128,"score":110,"percentile":129},"2026-05-06",0.02388,{"date":131,"score":110,"percentile":117},"2026-05-07",{"date":133,"score":110,"percentile":134},"2026-05-08",0.02422,{"date":136,"score":110,"percentile":137},"2026-05-09",0.0245,{"date":139,"score":110,"percentile":140},"2026-05-10",0.02447,{"date":142,"score":110,"percentile":143},"2026-05-11",0.02445,{"date":145,"score":110,"percentile":137},"2026-05-12",{"date":147,"score":148,"percentile":149},"2026-05-13",0.00016,0.03678,{"date":151,"score":148,"percentile":152},"2026-05-14",0.03693,{"date":154,"score":110,"percentile":155},"2026-05-15",0.01964,{"date":157,"score":110,"percentile":155},"2026-05-16",{"date":159,"score":110,"percentile":155},"2026-05-17",{"date":161,"score":110,"percentile":162},"2026-05-18",0.0195,{"date":164,"score":110,"percentile":165},"2026-05-19",0.0194,{"date":167,"score":110,"percentile":168},"2026-05-20",0.01935,{"date":170,"score":110,"percentile":171},"2026-05-21",0.01926,{"date":173,"score":110,"percentile":174},"2026-05-22",0.02057,{"date":176,"score":110,"percentile":177},"2026-05-23",0.02053,{"date":179,"score":110,"percentile":180},"2026-05-24",0.02049,{"date":182,"score":110,"percentile":183},"2026-05-25",0.02036,{"date":185,"score":186,"percentile":187},"2026-05-26",0.00015,0.03042,{"date":189,"score":186,"percentile":190},"2026-05-27",0.03063,{"date":192,"score":186,"percentile":193},"2026-05-28",0.03045,{"date":195,"score":186,"percentile":196},"2026-05-29",0.03047,{"date":198,"score":186,"percentile":199},"2026-05-30",0.03073,{"date":201,"score":186,"percentile":202},"2026-05-31",0.03057,{"date":204,"score":186,"percentile":205},"2026-06-01",0.03024,{"date":207,"score":41,"percentile":208},"2026-06-02",0.02644,{"date":210,"score":41,"percentile":211},"2026-06-03",0.02633,{"date":88,"score":41,"percentile":89},[214],{"source":45,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":215,"cvss_v4_0":9},{"baseScore":43,"baseSeverity":216,"vectorString":46,"impactScore":217,"exploitabilityScore":218},"HIGH",9.8,4.6,[220,267],{"ecosystem":9,"name":221,"vendor":222,"product":222,"cpe_part":223,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":224},"Linux","linux","a",[225,232,235,238,241,245,248,251,254,256,258,260,262,265],{"version":226,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":230,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 582fbecb3756330006fe1950762412a68c2cacd2",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","582fbecb3756330006fe1950762412a68c2cacd2","excluding",{"version":233,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":234,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 09e9206008b887aa553733bd915d73131071a086","09e9206008b887aa553733bd915d73131071a086",{"version":236,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":237,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 2eeae47a438694408189138048a786be99954032","2eeae47a438694408189138048a786be99954032",{"version":239,"is_range":227,"range_type":51,"version_start":228,"version_start_type":229,"version_end":240,"version_end_type":231,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 7e5aedf6059cba2a669d86caeaf5a51f33ec85a1","7e5aedf6059cba2a669d86caeaf5a51f33ec85a1",{"version":242,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":244,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 0d36653a3a821e5a974798adb347b3ea09332914","cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c","0d36653a3a821e5a974798adb347b3ea09332914",{"version":246,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":247,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 25d500cf391e384356a612b85cf60b353ad3cd0c","25d500cf391e384356a612b85cf60b353ad3cd0c",{"version":249,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":250,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 07ceb444c8f627cf863864d4274b5a77769725ed","07ceb444c8f627cf863864d4274b5a77769725ed",{"version":252,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":253,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C cb8092038e95dc1113a68e63762de40fff61ba71","cb8092038e95dc1113a68e63762de40fff61ba71",{"version":255,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":230,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 582fbecb3756330006fe1950762412a68c2cacd2",{"version":257,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":234,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 09e9206008b887aa553733bd915d73131071a086",{"version":259,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":237,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 2eeae47a438694408189138048a786be99954032",{"version":261,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":240,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 7e5aedf6059cba2a669d86caeaf5a51f33ec85a1",{"version":263,"is_range":227,"range_type":51,"version_start":243,"version_start_type":229,"version_end":264,"version_end_type":231,"fixed_in":9},">= cd19f7d3e39b3160595d56bb3e3a2bf4f7f4669c, \u003C 8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c","8bd29dbe03fc5b0f039ab2395ff37b64236d2f0c",{"version":266,"is_range":39,"range_type":51,"version_start":266,"version_start_type":229,"version_end":266,"version_end_type":229,"fixed_in":9},"3.14",{"ecosystem":9,"name":268,"vendor":222,"product":269,"cpe_part":270,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":271},"linux kernel","linux_kernel","o",[272,276,280,284,288],{"version":273,"is_range":227,"range_type":274,"version_start":9,"version_start_type":9,"version_end":275,"version_end_type":231,"fixed_in":9},"lt6.6.136","cpe","6.6.136",{"version":277,"is_range":227,"range_type":274,"version_start":278,"version_start_type":229,"version_end":279,"version_end_type":231,"fixed_in":9},"gte6.7_lt6.12.83","6.7","6.12.83",{"version":281,"is_range":227,"range_type":274,"version_start":282,"version_start_type":229,"version_end":283,"version_end_type":231,"fixed_in":9},"gte6.13_lt6.18.24","6.13","6.18.24",{"version":285,"is_range":227,"range_type":274,"version_start":286,"version_start_type":229,"version_end":287,"version_end_type":231,"fixed_in":9},"gte6.19_lt6.19.14","6.19","6.19.14",{"version":289,"is_range":227,"range_type":274,"version_start":290,"version_start_type":229,"version_end":291,"version_end_type":231,"fixed_in":9},"gte7.0_lt7.0.1","7.0","7.0.1"]