CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31407: linux kernel from 2.6.27 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.83 (exclusive)…

CVE-2026-31407. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00167 (percentile 0.05516), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.27 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before e7b5766693477c52424cc6c79dd30a7a9c7db52c, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before 78bba9f73942aa7dca47d817d8cec0fb9b443b70, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before be88a337bf07afb1ee173f1099294d1b7ab3fefe, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before c5e918390002edf0cff80a0e7ce1f86f16a9507c, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before 9174d28f3f15d8c4962f5980c0be167633880443, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before 67c53c1978cef3c504237275e39c857e2f6af56e, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before 0fbae1e74493d5a160a70c51aeba035d8266ea7d, a258860e01b80e8f554a4ab1a6c95e6042eb8b73 to before f900e1d77ee0ef87bfb5ab3fe60f0b3d8ad5ba05
Linux

Linux · 2.6.27
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_netlink.c, net/netfilter/nf_conntrack_proto_sctp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS
0.00167 · percentile 0.05516 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31407.html