Skip to main content
CVE-2026-31579VulnerabilityPublished Updated

Microsoft · wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-31579· Medium

Not known to be exploited · fixed in a1d0f6cbb962af29586e3e65a4bced1a5e39221f : update Microsoft when convenient.

Data as of 10 Nov 2026, 23:24 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in a1d0f6cbb962af29586e3e65a4bced1a5e39221f, 707607db2193591b68c0e70f814133472c185b1e, 60a25ef8dacb3566b1a8c4de00572a498e2a3bf9 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Apr 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • >=5.7.7 <5.8
Fixed in
  • a1d0f6cbb962af29586e3e65a4bced1a5e39221f
  • 707607db2193591b68c0e70f814133472c185b1e
  • 60a25ef8dacb3566b1a8c4de00572a498e2a3bf9
  • 9a9e69155b2091b8297afaf1533b8d68a3096841
  • 5.8
  • 1c52ef00e391144334f10995985c2f256d4be982
LinuxLinuxAffected
  • =5.8
Fixed in–

Description

CVE-2026-31579 is a vulnerability related to the WireGuard device driver, specifically involving the use of an exit routine callback instead of manual locking in the pre-exit function. The advisory references Microsoft products version 2.0 and 3.0 as affected.

References

Community reviews

Loading reviews…