CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31446: linux kernel 5.18; +4 more affected products

CVE-2026-31446. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00186 (percentile 0.07688), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.10.114 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.38 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.17.6 (inclusive), before 5.18 (exclusive)
linux

linux kernel · from 5.18.1 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 5.18
linux

linux kernel · 5.18 · update rc4
linux

linux kernel · 5.18 · update rc5
linux

linux kernel · 5.18 · update rc6
linux

linux kernel · 5.18 · update rc7
linux

linux kernel · 5.18 · update rc9
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · 52c3a04f9ec2a16a4204d6274db338cb8d5b2d74 to before c8fe17a1b308c3d8c703ebfb049b325f844342c3, b98535d091795a79336f520b0708457aacf55c67 to before c4d829737329f2290dd41e290b7d75effdb2a7ff, b98535d091795a79336f520b0708457aacf55c67 to before 9449f99ba04f5dd1c8423ad8a90b3651d7240d1d, b98535d091795a79336f520b0708457aacf55c67 to before 034053378dd81837fd6c7a43b37ee2e58d4f0b4e, b98535d091795a79336f520b0708457aacf55c67 to before c97e282f7bfd0c3554c63d289964a5ca6a1d2ffe, b98535d091795a79336f520b0708457aacf55c67 to before 08b10e6f37fc533a759e9833af0692242e8b3f93, b98535d091795a79336f520b0708457aacf55c67 to before d15e4b0a418537aafa56b2cb80d44add83e83697, 585ef03c9e79672781f954daae730dfe24bf3a46, afe490e48d47df1b3f64012835c1bc2f075a8c8b, 5.15.38 to before 5.15.203, 5.10.114 to before 5.11, 5.17.6 to before 5.18
Linux

Linux · 5.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/ext4.h, fs/ext4/super.c, fs/ext4/sysfs.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00186 · percentile 0.07688 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31446.html