P4Verified

CVE-2026-31408: linux kernel 2.6.12; +1 more affected products

CVE-2026-31408. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.004 (percentile 0.32687), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 37e18bc8c9a70d77bd099e2273f328b3bc7f6d0d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d57384e27d1ebf0047e3f00a6e1181b8be9857a2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b0a7da0e3f7442545f071499beb36374714bb9de, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 45aaca995e4a7a05b272a58e7ab2fff4f611b8f1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 108b81514d8f2535eb16651495cefb2250528db3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7197462e90b8ce15caa1ae15d4bc2bb8cd21b11e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e76e8f0581ef555eacc11dbb095e602fb30a5361, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 598dbba9919c5e36c54fe1709b557d64120cb94b
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/bluetooth/sco.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:14 UTC

CWE: CWE-416
CCR priority: 35.3 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.004 · percentile 0.32687 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:12:45.293412+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31408.html