Get real-time updates on Telegram
CVE-2026-31570: linux kernel 5.4; +1 more affected products
CVE-2026-31570. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00412 (percentile 0.33894), scored 15-Oct-2026.
Affected technology
linux kernel · from 5.4.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux
linux kernel · 5.4
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 456a8a646b2563438c16a9b27decf9aa717f1ebb to before e7c99348b0612b2bc02d5ce6ff9873261cc7605f, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 999ca48d55a8a46da21519db7e834e5867200379, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before a025283d7f7404c739225e457fb99db2368bb544, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 54ecdf76a55e75c1f5085e440f8ab671a3283ef5, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before c4e8eaa75fa0b6bcbfa5356d6195c4ad0e05e57a, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 84f8b76d24273175a22713e83e90874e1880d801, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 66b689efd08227da2c5ca49b58b30a95d23c695a, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before b9c310d72783cc2f30d103eed83920a5a29c671a
Linux
Linux · 5.4
Linux
Component: Not specified by the source
Function: cgw_csum_xor_rel
File: net/can/gw.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00412 · percentile 0.33894 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31570.html