CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31758: linux kernel from 4.19 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-31758. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00171 (percentile 0.06033), scored 15-Oct-2026.

Affected technology

linux kernel · from 4.19 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 4f3c8d6eddc272b386464524235440a418ed2029 to before 959ef329071136e4335b54822fe2f607659b4569, 4f3c8d6eddc272b386464524235440a418ed2029 to before e189d443767f7cd390c52f2e122e1fc41c7562d6, 4f3c8d6eddc272b386464524235440a418ed2029 to before 7fa8f61bab3fb75b5deba8a0f3abb74dc5068d9f, 4f3c8d6eddc272b386464524235440a418ed2029 to before 95e09b07e50290254b28b8395509473104518f8c, 4f3c8d6eddc272b386464524235440a418ed2029 to before d13318dec0c1e0e2ac16f8ecbd522db14cea4bb1, 4f3c8d6eddc272b386464524235440a418ed2029 to before 977b632db51d231dec0bc571089a5c2402674139, 4f3c8d6eddc272b386464524235440a418ed2029 to before d40198de50232e04c14c6e2092e896766c95ea48, 4f3c8d6eddc272b386464524235440a418ed2029 to before 8a768552f7a8276fb9e01d49773d2094ace7c8f1
Linux

Linux · 4.19
Linux

Component: Not specified by the source
File: drivers/usb/class/usbtmc.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00171 · percentile 0.06033 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31758.html