CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-31772: linux kernel 6.13; +1 more affected products

CVE-2026-31772. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00189 (percentile 0.08), scored 15-Oct-2026.

Affected technology

linux kernel · from 6.11.11 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.2 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13.1 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 6.13
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 91d19383b7ed035e22165ae5c836e50bb9f95fbe to before f5d446624345d309e7a4a1b27ea9f028d6a8c5d9, 42ecf1947135110ea08abeaca39741636f9a2285 to before aba0aea354015794e8312dd7efe726967e58aefe, 42ecf1947135110ea08abeaca39741636f9a2285 to before eaf32002ca7b1ba51c9f140991fd9febe6de79f0, 42ecf1947135110ea08abeaca39741636f9a2285 to before bc39a094730ce062fa034a529c93147c096cb488, 8958e1cee4e2eac1a5b825caa4dd96ce9ed975dd, 6.12.2 to before 6.12.81, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

Component: Not specified by the source
File: net/bluetooth/hci_sync.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00189 · percentile 0.08 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-31772.html