P4Verified

CVE-2026-31464: linux kernel from 2.6.27 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-31464. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00419 (percentile 0.34661), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before d842348f8a00d5b1d7358f207eb34ffcf5b16df3, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before a007246cb6c9ebdc93dafbf63cc2d43d98f402cc, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before 394a1cac3c12fdd7d77f19ccfd222ab5ff87ef89, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before 4ed727e35b0ab17d3eeeb1e8023768396e2be161, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before d1466bf991b2343cf2ba8336e440c8faf3cbb780, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before 786f10b1966e485046839f992e89f2c18cbd1983, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before bae4df0a643fa7f84663473aa3082a9c2ed139db, 072b91f9c6510d0ec4a49d07dbc318760c7da7b3 to before 61d099ac4a7a8fb11ebdb6e2ec8d77f38e77362f
Linux

Linux · 2.6.27
Linux

Component: Not specified by the source
File: drivers/scsi/ibmvscsi/ibmvfc.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CWE: CWE-125
CCR priority: 32.5 /100 (P4)
CVSS 3.1: 8.1 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS: 0.00419 · percentile 0.34661 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31464.html