CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31657: linux kernel 3.5; +1 more affected products

CVE-2026-31657. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00399 (percentile 0.3249), scored 15-Oct-2026.

Affected technology

linux kernel · from 3.5.1 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 3.5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 23721387c409087fd3b97e274f34d3ddc0970b74 to before 5202f071b367ffbc8e279fc7a00db14f5e587f52, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 69d1ce9c72eca91203ffdb8d08bacd511100aec6, 23721387c409087fd3b97e274f34d3ddc0970b74 to before f4858832ddef2f39f21e30b7226bbcd3c4b2bc96, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 2f55b58b5a0bbed192d60c444a45a49cdf1b545f, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 7962b522222628596ca9ecc8722efc95367aadbd, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 4dee4c0688443aaf5bbec74aa203c851d1d53c35, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 1f2dc36c297d27733f1b380ea644cf15a361bd7b, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 82d8701b2c930d0e96b0dbc9115a218d791cb0d2
Linux

Linux · 3.5
Linux

Component: Not specified by the source
File: net/batman-adv/bridge_loop_avoidance.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00399 · percentile 0.3249 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31657.html