CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31617: linux kernel from 5.9 (inclusive), before 6.6.136 (exclusive), from 6.12 (inclusive), before 6.12.83 (exclusive), from…

CVE-2026-31617. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00171 (percentile 0.05991), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.9 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · from 7.0 (inclusive), before 7.0.1 (exclusive)
linux

Linux · 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 068a7f2749fff6462a0a908ec415b885fe430f50, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 1425655c2870054c3ab4712e2b6dbdd331597ada, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 8b3b7bd3c02f98634baaf36c7fc7ac915f6517ca, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 0f156bb5334e588034ca68ac2ee92b23f66e56e7, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 8757a2593631443648218244b9788e193ae0fdc1, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 6762f8a95772265dd0c2ffe7f400493f3115b135, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before d58ba8f6546232f8414f396c189297dbee03f1a7, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 74908b0318d1df1188457040b8714ff4d4b68126, 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 to before 8f993d30b95dc9557a8a96ceca11abed674c8acb, f7e0611e207d8908c4f2858e244370529a76dbf7, b88ad6e714284b33a47834f5f2a294c2b37c66aa, 471b23586387a32857778c511be60ab31c98dcfd, 4f529c4d1e436230d3af7c09a3239677a14d2b46, ae6a5394d9fbe118bc95cfe376d6a9d91d7547e8, 4.9.235 to before 4.10, 4.14.196 to before 4.15, 4.19.143 to before 4.20, 5.4.62 to before 5.5, 5.8.6 to before 5.9
Linux

Linux · 5.9
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/usb/gadget/function/f_ncm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-191
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00171 · percentile 0.05991 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31617.html