CVE-2026-31663: linux kernel 4.15; +6 more affected products

Affected technology

linux kernel · from 3.2.100 (inclusive), before 3.3 (exclusive)
linux

linux kernel · from 3.16.55 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.14.24 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.15.1 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 4.15
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · acf568ee859f098279eadf551612f103afdacb4e to before 4236c30b437b80f673b9e08c8fae38b8d471ac9e, acf568ee859f098279eadf551612f103afdacb4e to before 0f451b43c88bf2b9c038b414be580efee42e031b, acf568ee859f098279eadf551612f103afdacb4e to before 5002beda5cac69d522dc54da0d5d463ed9c963d2, acf568ee859f098279eadf551612f103afdacb4e to before 1c428b03840094410c5fb6a5db30640486bbbfcb, 69895c5ea0ca2e8d7de1e6d36965d0ab9730787f, 833760100588acfb267dac4d6a02ab9931237739, e095ecaec6d94aa2156cceb98a85d409b51190f3, 3.2.100 to before 3.3, 3.16.55 to before 3.17, 4.14.24 to before 4.15
Linux

Linux · 4.15
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: net/ipv4/xfrm4_input.c, net/ipv6/xfrm6_input.c, net/xfrm/xfrm_input.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.