Get real-time updates on Telegram
CVE-2026-31513: linux kernel from 6.12.75 (inclusive), before 6.12.80 (exclusive), from 6.18.16 (inclusive), before 6.18.21…
CVE-2026-31513. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00385 (percentile 0.30966), scored 15-Oct-2026.
Affected technology
linux kernel · from 6.12.75 (inclusive), before 6.12.80 (exclusive)
linux
linux kernel · from 6.18.16 (inclusive), before 6.18.21 (exclusive)
linux
linux kernel · from 6.19.6 (inclusive), before 6.19.11 (exclusive)
linux
Linux · 935f324e4b2461df2cf7f02b4195082b4304c708 to before c8e1a27edb8b4e5afb56b384acd7b6c2dec1b7cc, e981a9392800ce2c5bca196a6ab2c55e9370efaa to before 5b35f8211a913cfe7ab9d54fa36a272d2059a588, f3fdf2e7276a3edc5df55454275da20eac186970 to before a3d9c50d69785ae02e153f000da1b5fd6dbfdf1b, c28d2bff70444a85b3b86aaf241ece9408c7858c to before 9d87cb22195b2c67405f5485d525190747ad5493
Linux
Linux · 6.12.75 to before 6.12.80, 6.18.16 to before 6.18.21, 6.19.6 to before 6.19.11
Linux
Component: Not specified by the source
Function: allocates, calculates, correctly
File: net/bluetooth/l2cap_core.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 32.5 /100 (P4)
- CVSS 3.1
- 8.1 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00385 · percentile 0.30966 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31513.html