Get real-time updates on Telegram
CVE-2026-97990: Linux 5.19
CVE-2026-97990. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00118 (percentile 0.01549), scored 03-Oct-2026.
Affected technology
Linux · cfe226892913a448e83e7a19db93862baa3cb99c to before 1b803d382cde6d85755b363f22010208a04ba40a, cfe226892913a448e83e7a19db93862baa3cb99c to before c001abcde865b74231da8f1412c3217dbf66781e, cfe226892913a448e83e7a19db93862baa3cb99c to before 3af20238a09ca180d66623e3bed16b64e9975f39, cfe226892913a448e83e7a19db93862baa3cb99c to before 2bbf1c1f69991e28787e02b0a2f826289d5fc730, cfe226892913a448e83e7a19db93862baa3cb99c to before 0d195797a80b77f2ec56718cd26d3ee65d0093e8
Linux
Linux · 5.19
Linux
Component: Not specified by the source
File: drivers/vdpa/vdpa_sim/vdpa_sim_net.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 30.0 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00118 · percentile 0.01594 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97990.html