CVE-2026-31525: linux kernel from 6.6 (inclusive), before 6.6.131 (exclusive), from 6.7 (inclusive), before 6.12.80 (exclusive), from…

Affected technology

linux kernel · from 6.6 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 694ea55f1b1c74f9942d91ec366ae9e822422e42, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 9ab1227765c446942f290c83382f0b19887c55cf, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before f14ca604c0ff274fba19f73f1f0485c0047c1396, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 0d5d8c3ce45c734aaf3c51cbef59155a6746157d, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before c77b30bd1dcb61f66c640ff7d2757816210c7cb0
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: kernel/bpf/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.