CVE-2026-31473: linux kernel 4.20; +1 more affected products

Affected technology

linux kernel · from 4.20.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 4.20
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before 331242998a7ade5c2f65e14988901614629f3db5, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before 2c685e99efb3b3bd2b78699fba6b1cf321975db0, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before 585fd9a2063dacce8b2820f675ef23d5d17434c5, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before 1a0d9083c24fbd5d22f7100f09d11e4d696a5f01, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before d8549a453d5bdc0a71de66ad47a1106703406a56, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before 72b9e81e0203f03c40f3adb457f55bd4c8eb112d, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before cf2023e84f0888f96f4b65dc0804e7f3651969c1, 6093d3002eabd7c2913d97f1d1f4ce34b072acf9 to before bef4f4a88b73e4cc550d25f665b8a9952af22773
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: drivers/media/mc/mc-request.c, drivers/media/v4l2-core/v4l2-ioctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.