CVE-2026-31607: linux kernel from 2.6.39 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.83 (exclusive)…

Affected technology

linux kernel · from 2.6.39 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · from 7.0 (inclusive), before 7.0.1 (exclusive)
linux

Linux · 1325f85fa49f57df034869de430f7c302ae23109 to before 324262c38438255bf6bdbf6342ca47c0badaab76, 1325f85fa49f57df034869de430f7c302ae23109 to before 973f2c250289f5bf6cc146b98aa6fdde11fe50d6, 1325f85fa49f57df034869de430f7c302ae23109 to before ce744264b06b97069b3722511ab355738311fee0, 1325f85fa49f57df034869de430f7c302ae23109 to before 885c8591784da6314f9aa82fa460ac69f9f79e5f, 1325f85fa49f57df034869de430f7c302ae23109 to before 8d155e2d1c4102f74f82a2bf9c016164bb0f7384, 1325f85fa49f57df034869de430f7c302ae23109 to before 906f16a836de13fe61f49cdce2f66f2dbd14caf4, 1325f85fa49f57df034869de430f7c302ae23109 to before ef8ebb1c637b4cfb61a9dd2e013376774ee2033b, 1325f85fa49f57df034869de430f7c302ae23109 to before 5e1c4ece08ccdc197177631f111845a2c68eede3, 1325f85fa49f57df034869de430f7c302ae23109 to before 2ab833a16a825373aad2ba7d54b572b277e95b71, d9638d9236eed035a575feddec61d036dacc2676, ca7d3501b7a287c18b5b470e871d3029b0f4842a, 1ce528277e1a66856ed3f7526c1e3458c0ed4a70, db898d0c5c493ce4177d5e1d3a953e079a56a24b, 5aa02704b9ee67c5b2ee26d54c5f4eb99e93ba9a, 2.6.32.37 to before 2.6.33, 2.6.33.10 to before 2.6.34, 2.6.34.11 to before 2.6.35, 2.6.35.13 to before 2.6.36, 2.6.38.3 to before 2.6.39
Linux

Linux · 2.6.39
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: drivers/usb/usbip/usbip_common.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.