Get real-time updates on Telegram
CVE-2026-31708: linux kernel from 5.1 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.84 (exclusive), from…
CVE-2026-31708. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00307 (percentile 0.21838), scored 14-Oct-2026.
Affected technology
linux kernel · from 5.1 (inclusive), before 6.6.136 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.84 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.25 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.2 (exclusive)
linux
Linux · f5778c398713692a16150ae96e5c8270bab8399f to before e66bdc0704977ecee667a81d38255b579c2353d0, f5778c398713692a16150ae96e5c8270bab8399f to before 9e203dbb5402897c43130fb171a2617008a91f45, f5778c398713692a16150ae96e5c8270bab8399f to before 1dd757379997b71a328a4b591ffaf481acd0ead1, f5778c398713692a16150ae96e5c8270bab8399f to before a34d456934fe42e4da5d2cc07787bf418bee99c6, f5778c398713692a16150ae96e5c8270bab8399f to before ac2f14e4705d020f04e806efa0d49ab8dc2b145f, f5778c398713692a16150ae96e5c8270bab8399f to before 078fae8f50adebb903ccf2252b44391324571e78, f5778c398713692a16150ae96e5c8270bab8399f to before 85fd46ee26a11841c670449508025965f61ce131, f5778c398713692a16150ae96e5c8270bab8399f to before a58c5af19ff0d6f44f6e9fe31e33a2c92223f77e
Linux
Linux · 5.1
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: fs/smb/client/smb2ops.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 32.5 /100 (P4)
- CVSS 3.1
- 8.1 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00307 · percentile 0.21838 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-31708.html