CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31532: linux kernel from 4.1 (inclusive), through 6.6.136 (inclusive), from 6.7 (inclusive), before 6.12.83 (exclusive), from…

CVE-2026-31532. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00174 (percentile 0.0641), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.1 (inclusive), through 6.6.136 (inclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.18 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · from 7.0 (inclusive), before 7.0.1 (exclusive)
linux

Linux · 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 1de30576a6dfeaaa27ef91fa272e6b9240b6fbd3, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 64c8553decf5a5f2417bd54761ea0a832c56c4ca, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 3f43f12fde34737fba091b7e3ab391e14ddbb0be, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 5e9cfffad898bbeaafd0ea608a6d267362f050fc, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 572f0bf536ebc14f6e7da3d21a85cf076de8358e, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 1a0f2de81f7fbdc538fc72d7d74609b79bc83cc0, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 7201a531b9a5ed892bfda5ded9194ef622de8ffa, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before 34c1741254ff972e8375faf176678a248826fe3a, 514ac99c64b22d83b52dfee3b8becaa69a92bc4a to before a535a9217ca3f2fccedaafb2fddb4c48f27d36dc
Linux

Linux · 4.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/can/raw.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00174 · percentile 0.0641 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31532.html