Get real-time updates on Telegram
CVE-2026-31431, CVE-2026-33814, CVE-2026-39821 +2 more CVEs: Sigstore Timestamp Authority (exact versions not specified)
CVE-2026-31431, CVE-2026-33814, CVE-2026-39821, CVE-2026-39984, CVE-2026-41567 affects Kernel. EPSS 0.03437 (percentile 0.88923), scored 24-Oct-2026. Fixed version: 893d22e0135fa394db81df88697fba6032747667. Fixed version: 19d43105a97be0810edbda875f2cd03f30dc130c. Fixed version: 961cfa271a918ad4ae452420e7c303149002875b. Fixed version: 3115af9644c342b356f3f07a4dd1c8905cd9a6fc. Fixed version: 8b88d99341f139e23bdeb1027a2a3ae10d341d82. Fixed version: fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8. Fixed version: ce42ee423e58dffa5ec03524054c9d8bfd4f6237.
CVE-2026-31431
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could gain higher privileges. OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high.
CVE-2026-33814
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-39821
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-39984
Affected technology
Sigstore Timestamp Authority · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-41567
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · User interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CVE
- CVE-2026-39984, CVE-2026-41567
- Product
- Kernel
- CCR priority
- 0.9 /100 (P5)
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · OSV.dev
- EPSS
- 0.03437 · percentile 0.88923 · 2026-10-24
- KEV
- no
Provenance
- CERT-EU Security Advisories · Source record · observed 2026-10-04 07:08:48.496043+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- Fortinet PSIRT advisories (FortiGuard IR feed) · Source record · observed 2026-10-04 07:42:07.191172+00:00 UTC
- OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC
- OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31431.html