CVE-2026-31399

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.12% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 2.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-07-24.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-04-03 15:16Z5 MO AGO

Last updated

2026-05-23 16:04Z3 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-416Use After FreeVariant
• CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

a86e2fca810634d3365e945f75d9ad37818533a0524b845f3862dd9785c03e81

• git.kernel.orghttps://git.kernel.org/stable/c/6fc36c2a925ceaba203eb13d75a8f0879a2c121b
• git.kernel.orghttps://git.kernel.org/stable/c/a36cf138500e56f50db9f9a33222df6969b38326
• git.kernel.orghttps://git.kernel.org/stable/c/9a0fb16ba5b372465a3a1ecd761c6fa911a4ab4d
• git.kernel.orghttps://git.kernel.org/stable/c/e48bf8f1d2b12c1c5ba1f609edbd4cde5dadc20e
• git.kernel.orghttps://git.kernel.org/stable/c/2c638259ad750833fd46a0cf57672a618542d84c
• git.kernel.orghttps://git.kernel.org/stable/c/a226e5b49e5fe8c98b14f8507de670189d191348
• git.kernel.orghttps://git.kernel.org/stable/c/84af19855d1abdee3c9d57c0684e2868e391793c
• git.kernel.orghttps://git.kernel.org/stable/c/a8aec14230322ed8f1e8042b6d656c1631d41163