P4Verified

CVE-2026-31533: linux kernel from 5.15.160 (inclusive), before 5.15.203 (exclusive), from 6.1.84 (inclusive), before 6.1.169…

CVE-2026-31533. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00707 (percentile 0.52352), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.15.160 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 6.1.84 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.6.18 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7.6 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 3ade391adc584f17b5570fd205de3ad029090368 to before 414fc5e5a5aff776c150f1b86770e0a25a35df3a, cd1bbca03f3c1d845ce274c0d0a66de8e5929f72 to before 02f3ecadb23558bbe068e6504118f1b712d4ece0, 13eca403876bbea3716e82cdfe6f1e6febb38754 to before 0e43e0a3c94044acc74b8e0927c27972eb5a59e8, 8590541473188741055d27b955db0777569438e3 to before aa9facde6c5005205874c37db3fd25799d741baf, 8590541473188741055d27b955db0777569438e3 to before 5d70eb25b41e9b010828cd12818b06a0c3b04412, 8590541473188741055d27b955db0777569438e3 to before 2694d408b0e595024e0fc1d64ff9db0358580f74, 8590541473188741055d27b955db0777569438e3 to before a9b8b18364fffce4c451e6f6fd218fa4ab646705, ab6397f072e5097f267abf5cb08a8004e6b17694, 5.15.160 to before 5.15.203, 6.1.84 to before 6.1.169, 6.6.18 to before 6.6.135, 6.7.6 to before 6.8
Linux

Linux · 6.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/tls/tls_sw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-416
CCR priority: 39.4 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00707 · percentile 0.52352 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31533.html