Get real-time updates on Telegram
CVE-2026-31696: linux kernel from 3.17 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.84 (exclusive), from…
CVE-2026-31696. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00176 (percentile 0.06635), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.17 (inclusive), before 6.6.136 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.84 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.25 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.2 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
Linux · 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before 44714dfda386884919ba366411880b6fb3c3efd3, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before 41a117dd80371343babc52198d1114e83eb37627, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before 9a397aa9b5e53ca63d4d6aefb542832eca389618, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before 1fa36cf495b0023e8475d038535c05e4063211e1, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before 4458757c020592a3094366e0fb20457383b42f92, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before ce383ba615339f8eaec646a166d2c2b015bb5ca0, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before a1be1c9ece26cea69654f28b255ff9a7906b897b, 8a7a3eb4ddbe7c7e639170a64adede7cbd5a9247 to before ac33733b10b484d666f97688561670afd5861383
Linux
Linux · 3.17
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/rxrpc/key.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
An unprivileged user can provide a very large ticket length. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-787
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00176 · percentile 0.06635 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31696.html