Get real-time updates on Telegram
CVE-2026-31419: linux kernel from 5.10.94 (inclusive), before 5.11 (exclusive), from 5.15.17 (inclusive), before 5.16 (exclusive)…
CVE-2026-31419. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00181 (percentile 0.072), scored 15-Oct-2026.
Affected technology
linux kernel · from 5.10.94 (inclusive), before 5.11 (exclusive)
linux
linux kernel · from 5.15.17 (inclusive), before 5.16 (exclusive)
linux
linux kernel · from 5.16.3 (inclusive), before 5.17 (exclusive)
linux
linux kernel · from 5.17 (inclusive), before 6.12.86 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
Linux · 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 00752893f96b344f258c9c6de18b33171ac4872c, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 2de5c8eea0a9db99dae7c36f4b541b74b41d3a04, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before a0f661918edc79d7a75e468128af8d41e2a1a83a, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before d4cc7e4c80b1634c7b1497574a2fdb18df6c026c, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before f5b94654a4a19891a8108d66ef166de6c028c6cd, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 2884bf72fb8f03409e423397319205de48adca16, 20949c3816463e97c6f8fe84c0280c7e5ae83a8d, f1d206181f19b00b275b258fea1418718a2f4173, c1f1691ef84fa6d38fa5e5148eca073145e97ffa, 5.10.94 to before 5.11, 5.15.17 to before 5.16, 5.16.3 to before 5.17
Linux
Linux · 5.17
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: drivers/net/bonding/bond_main.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00181 · percentile 0.072 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:12:45.293412+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31419.html