CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31570: linux kernel 5.4; +1 more affected products

CVE-2026-31570. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00412 (percentile 0.33894), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.4.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 456a8a646b2563438c16a9b27decf9aa717f1ebb to before e7c99348b0612b2bc02d5ce6ff9873261cc7605f, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 999ca48d55a8a46da21519db7e834e5867200379, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before a025283d7f7404c739225e457fb99db2368bb544, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 54ecdf76a55e75c1f5085e440f8ab671a3283ef5, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before c4e8eaa75fa0b6bcbfa5356d6195c4ad0e05e57a, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 84f8b76d24273175a22713e83e90874e1880d801, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before 66b689efd08227da2c5ca49b58b30a95d23c695a, 456a8a646b2563438c16a9b27decf9aa717f1ebb to before b9c310d72783cc2f30d103eed83920a5a29c671a
Linux

Linux · 5.4
Linux

Component: Not specified by the source
Function: cgw_csum_xor_rel
File: net/can/gw.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00412 · percentile 0.33894 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31570.html