wifi: rt2x00usb: fix devres lifetime
Summary
wifi: rt2x00usb: fix devres lifetime
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
wifi: rt2x00usb: fix devres lifetime
USB drivers bind to USB interfaces and any device managed resources
should have their lifetime tied to the interface rather than parent USB
device. This avoids issues like memory leaks when drivers are unbound
without their devices being physically disconnected (e.g. on probe
deferral or configuration changes).
Fix the USB anchor lifetime so that it is released on driver unbind.
Affected packages
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2026-31672 linux-lts Fixed in: 6.1.170-r0
- Debian DEBIAN-CVE-2026-31672 linux Fixed in: 5.10.257-1
- Ubuntu UBUNTU-CVE-2026-31672 linux-azure
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org