P4Verified

CVE-2026-31494: linux kernel 4.16; +4 more affected products

CVE-2026-31494. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00184 (percentile 0.07411), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.16.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 4.16
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 9738be665544281aa624842812c2fbfed6f88226, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 240c5302eed83e34e98db18f6795ee5f40814024, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 9596759a84e1dbf2670518d85e969208960041f9, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 95246341945163ad9a250a87ca5bd1c1252777ae, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 9d74d10e4e26672e139a8bcf8bf95957bf2d160f, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 7ff87da099210856cbfe2f2f7f52ddfa57af4f0c, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before e182fe273cdf5a8931592228196ef514ffac392b, 512286bbd4b7d5b15d26ba8078c8bfd1fc1129bd to before 72d96e4e24bbefdcfbc68bdb9341a05d8f5cb6e5
Linux

Linux · 4.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/cadence/macb_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-787
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00184 · percentile 0.07411 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31494.html