CVE-2026-31621

In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliary_device_add() fails, the error block calls auxiliary_device_uninit() but does not return. The uninit drops the last reference and synchronously runs bnge_aux_dev_release(), which sets bd->auxr_dev = NULL and frees the underlying object. The subsequent bd->auxr_dev->net = bd->netdev then dereferences NULL, which is not a good thing to have happen when trying to clean up from an error. Add the missing return, as the auxiliary bus documentation states is a requirement (seems that LLM tools read documentation better than humans do...)

• CWE-908

• https://git.kernel.org/stable/c/38c383ec6d37f4b5597f8e6a1f5c2ab31ea01d3aPatch
• https://git.kernel.org/stable/c/87bc3557c708110d83086bf091328271298a44e3Patch
• https://git.kernel.org/stable/c/8b0c25528cb64f71a73b5c0d49cbbcb68540a4cePatch

Published

Apr 24, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31615In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31616In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31617In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31618In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31619In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31620In the Linux kernel, the following vulnerability has been re…4.6
• CVE-2026-31622In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-31623In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31624In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31625In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31626In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-31627In the Linux kernel, the following vulnerability has been re…7.8