P4Verified

CVE-2026-31454: linux kernel from 5.9 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-31454. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00171 (percentile 0.06029), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · 90c60e16401248a4900f3f9387f563d0178dcf34 to before edd1637d4e3911ab6c760f553f2040fe72f61a13, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 19437e4f7bb909afde832b39372aa2f3ce3cfd88, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 6dbe17f19c290a72ce57d5abc70e1fad0c3e14e5, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 75669e987137f49c99ca44406bf0200d1892dd16, 90c60e16401248a4900f3f9387f563d0178dcf34 to before d8fc60bbaf5aea1604bf9f4ed565da6a1ac7a87d, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 50f5f056807b7bed74f4f307f2ca0ed92f3e556d, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 4c7d50147316cf049462f327c4a3e9dc2b7f1dd0, 90c60e16401248a4900f3f9387f563d0178dcf34 to before 394d70b86fae9fe865e7e6d9540b7696f73aa9b6
Linux

Linux · 5.9
Linux

Component: Not specified by the source
File: fs/xfs/xfs_dquot_item.c, fs/xfs/xfs_inode_item.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CWE: CWE-416
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00171 · percentile 0.06029 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31454.html