CVE-2026-31788: linux kernel 2.6.37; +1 more affected products

Affected technology

linux kernel · from 2.6.37.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 2.6.37
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 4eb245ff0d33b618e097a2c23de5df56d4ad6969, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 3ee5b9e3de4b8bdd74183d83205481c91a9effc8, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 87a803edb2ded911cb587c53bff179d2a2ed2a28, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 1879319d790f7d57622cdc22807b60ea78b56b6d, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 78432d8f0372c71c518096395537fa12be7ff24e, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 389bae9a4409934e8b8d4dbdaaf02a3ae71cf8e4, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before cbede2e833da1893afbea9b3ff29b5dda23a4a91, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to before 453b8fb68f3641fea970db88b7d9a153ed2a37e8
Linux

Linux · 2.6.37
Linux

Component: Not specified by the source
File: drivers/xen/privcmd.c

Attack conditions (Source advisory, CVSS 3.1): Local · High privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.