Get real-time updates on Telegram
CVE-2026-31657: linux kernel 3.5; +1 more affected products
CVE-2026-31657. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00399 (percentile 0.3249), scored 15-Oct-2026.
Affected technology
linux kernel · from 3.5.1 (inclusive), before 6.1.169 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux
linux kernel · 3.5
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 23721387c409087fd3b97e274f34d3ddc0970b74 to before 5202f071b367ffbc8e279fc7a00db14f5e587f52, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 69d1ce9c72eca91203ffdb8d08bacd511100aec6, 23721387c409087fd3b97e274f34d3ddc0970b74 to before f4858832ddef2f39f21e30b7226bbcd3c4b2bc96, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 2f55b58b5a0bbed192d60c444a45a49cdf1b545f, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 7962b522222628596ca9ecc8722efc95367aadbd, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 4dee4c0688443aaf5bbec74aa203c851d1d53c35, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 1f2dc36c297d27733f1b380ea644cf15a361bd7b, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 82d8701b2c930d0e96b0dbc9115a218d791cb0d2
Linux
Linux · 3.5
Linux
Component: Not specified by the source
File: net/batman-adv/bridge_loop_avoidance.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00399 · percentile 0.3249 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31657.html