P4Verified

CVE-2026-31667: linux kernel 2.6.19; +1 more affected products

CVE-2026-31667. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00136 (percentile 0.02672), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.19.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 2.6.19
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · ff462551235d8d7d843a005950bc90924fcedede to before 71a9729f412e2c692a35c542e14b706fb342927f, ff462551235d8d7d843a005950bc90924fcedede to before 271ee71a1917b89f6d73ec82dd091c33d92ee617, ff462551235d8d7d843a005950bc90924fcedede to before 974f7b138c3a96dd5cd53d1b33409cd7b2229dc6, ff462551235d8d7d843a005950bc90924fcedede to before 546c18a14924eb521fe168d916d7ce28f1e13c1d, ff462551235d8d7d843a005950bc90924fcedede to before a3d6c9c053c9c605651508569230ead633b13f76, ff462551235d8d7d843a005950bc90924fcedede to before 1e09dfbb4f5d20ee111f92325a00f85778a5f328, ff462551235d8d7d843a005950bc90924fcedede to before 1534661043c434b81cfde26b97a2fb2460329cf0, ff462551235d8d7d843a005950bc90924fcedede to before 4cda78d6f8bf2b700529f2fbccb994c3e826d7c2
Linux

Linux · 2.6.19
Linux

Component: Not specified by the source
File: drivers/input/misc/uinput.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CWE: CWE-667
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00136 · percentile 0.02672 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31667.html