Get real-time updates on Telegram
CVE-2026-31478: linux kernel 6.6; +1 more affected products
CVE-2026-31478. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00738 (percentile 0.53558), scored 15-Oct-2026.
Affected technology
linux kernel · from 5.15.145 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 6.1.71 (inclusive), before 6.1.168 (exclusive)
linux
linux kernel · from 6.6.1 (inclusive), before 6.6.131 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux
linux kernel · 6.6
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · f2283680a80571ca82d710bc6ecd8f8beac67d63 to before 70b4c414889492c522b6e4331562360f49be2361, 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 to before 9a7166f0ef8cbb7bb48dd05e2471d995566003f5, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before c3a89e3ec1ccf64fa6a34e391e1581ebbcba8683, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 6aef1765d6807e0f027cd87f6ac973eb0879a46d, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 80824c7e527b70cf9039534e60aff592e8f209d1, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 4cb537ae4f37d7d0f617815ed4bed7173fb50861, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 0e55f63dd08f09651d39e1b709a91705a8a0ddcb, 5.15.145 to before 5.15.203, 6.1.71 to before 6.1.168
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: fs/smb/server/smb2pdu.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 39.4 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00738 · percentile 0.53558 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31478.html