CVE-2026-31402

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.95% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 58.6% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-07-24.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-04-03 15:16Z5 MO AGO

Last updated

2026-08-05 12:22Z1 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

d46e864b4ecff219d086efd0ac5cc7b25fc7e9be56381d71d594296f552ec883

• git.kernel.orghttps://git.kernel.org/stable/c/f9fcb4441f6c02bb20c2eb340101e27dfe23607c
• git.kernel.orghttps://git.kernel.org/stable/c/2665887a69437a8a4f552f69509eecfb73d4aa19
• git.kernel.orghttps://git.kernel.org/stable/c/c9452c0797c95cf2378170df96cf4f4b3bca7eff
• git.kernel.orghttps://git.kernel.org/stable/c/8afb437ea1f70cacb4bbdf11771fb5c4d720b965
• git.kernel.orghttps://git.kernel.org/stable/c/dad0c3c0a8e5d1d6eb0fc455694ce3e25e6c57d0
• git.kernel.orghttps://git.kernel.org/stable/c/0f0e2a54a31a7f9ad2915db99156114872317388
• git.kernel.orghttps://git.kernel.org/stable/c/ae8498337dfdfda71bdd0b807c9a23a126011d76
• git.kernel.orghttps://git.kernel.org/stable/c/5133b61aaf437e5f25b1b396b14242a6bb0508e2
• access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-31402vdb-entryx_refsource_REDHAT
• bugzilla.redhat.comRHBZ#2454844https://bugzilla.redhat.com/show_bug.cgi?id=2454844issue-trackingx_refsource_REDHAT
• security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31402.jsonx_sadp-csaf-vex
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14823vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14925vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14869vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:15883vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13566vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19569vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13936vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13734vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:10108vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:11313vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13565vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19568vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13577vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36530vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14165vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13664vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13681vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36531vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36532vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36533vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36534vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:13578vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14137vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:14301vendor-advisoryx_refsource_REDHAT
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html