CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31419: linux kernel from 5.10.94 (inclusive), before 5.11 (exclusive), from 5.15.17 (inclusive), before 5.16 (exclusive)…

CVE-2026-31419. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00181 (percentile 0.072), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.10.94 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.17 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 5.16.3 (inclusive), before 5.17 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 6.12.86 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 00752893f96b344f258c9c6de18b33171ac4872c, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 2de5c8eea0a9db99dae7c36f4b541b74b41d3a04, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before a0f661918edc79d7a75e468128af8d41e2a1a83a, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before d4cc7e4c80b1634c7b1497574a2fdb18df6c026c, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before f5b94654a4a19891a8108d66ef166de6c028c6cd, 4e5bd03ae34652cd932ab4c91c71c511793df75c to before 2884bf72fb8f03409e423397319205de48adca16, 20949c3816463e97c6f8fe84c0280c7e5ae83a8d, f1d206181f19b00b275b258fea1418718a2f4173, c1f1691ef84fa6d38fa5e5148eca073145e97ffa, 5.10.94 to before 5.11, 5.15.17 to before 5.16, 5.16.3 to before 5.17
Linux

Linux · 5.17
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: drivers/net/bonding/bond_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00181 · percentile 0.072 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31419.html