P4Verified

CVE-2026-31679: linux kernel from 5.5 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-31679. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00167 (percentile 0.05513), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.5 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 68f32ef0683c8d1c05cd2e4f16818fa63ff59c6f, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 4cae986225f8b8679ad86b924918e7d75a96aa61, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 8ed7b9930cbc3bc71f868fa79a68700ac88d586a, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before c1f97152df8dfb17e855ddf0fc409b7bd13e9700, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 98de18d327ef8cbbb704980e359e4872d8c28997, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before bd50c7484c3bb34097571c1334174fb8b7408036, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 2ca33b88a79ca42f017ae0f7011280325655438e, fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 to before 546b68ac893595877ffbd7751e5c55fd1c43ede6
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: net/openvswitch/flow_netlink.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CCR priority: 28.4 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS: 0.00167 · percentile 0.05513 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31679.html