CVE-2026-31487: linux kernel 4.20; +1 more affected products

Affected technology

linux kernel · from 4.20.1 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 4.20
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 5039563e7c25eccd7fec1de6706011009d1c5665 to before 6e8eb467bed6aa1a563dba8f366c9fd76ba0004e, 5039563e7c25eccd7fec1de6706011009d1c5665 to before eedf220442d13b6d97294e5b0ac8a2c38ee1a1a0, 5039563e7c25eccd7fec1de6706011009d1c5665 to before c73a58661a760373d08a6883af4f0bb5cc991a67, 5039563e7c25eccd7fec1de6706011009d1c5665 to before e0ae367a2de06c49aa1de6ec9b1ab6860bbb2cf0, 5039563e7c25eccd7fec1de6706011009d1c5665 to before cc34d77dd48708d810c12bfd6f5bf03304f6c824
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: drivers/spi/spi.c, include/linux/spi/spi.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.