01 Record

CVE-2026-31700

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.10% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 1.1% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-01 13:56Z4 MO AGO

Last updated

2026-08-05 12:24Z1 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

6c2de5cfee8b787de62f07e6a8c8c513c354d3d5199cfc5b2e48a45b47d8da77

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1d036d25e5609ba73fee6a88db01c306b140d512 to < 0f4c9754956b86de158a4af5278c5cf5bda9439e, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 714aa973da8163925eda7efd49361ccbee21ee46, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 1490f82353bdabc09265a74e645b07f05cf4188e, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 74e2db36fe50e3ad9d5300d7fd0e6e2a15a6d121, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 3a1bf9116ea31470b89692585c3910dfe830dcdd, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 28324a3b62d9ce7f9bdd65a8ce63f382041d1b27, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 48a6ef291a17639e1b6ae0fbe9c8b2bb87d7804b, 1d036d25e5609ba73fee6a88db01c306b140d512 to < 2c054e17d9d41f1020376806c7f750834ced4dc5, 4.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0f4c9754956b86de158a4af5278c5cf5bda9439e
git.kernel.orghttps://git.kernel.org/stable/c/714aa973da8163925eda7efd49361ccbee21ee46
git.kernel.orghttps://git.kernel.org/stable/c/1490f82353bdabc09265a74e645b07f05cf4188e
git.kernel.orghttps://git.kernel.org/stable/c/74e2db36fe50e3ad9d5300d7fd0e6e2a15a6d121
git.kernel.orghttps://git.kernel.org/stable/c/3a1bf9116ea31470b89692585c3910dfe830dcdd
git.kernel.orghttps://git.kernel.org/stable/c/28324a3b62d9ce7f9bdd65a8ce63f382041d1b27
git.kernel.orghttps://git.kernel.org/stable/c/48a6ef291a17639e1b6ae0fbe9c8b2bb87d7804b
git.kernel.orghttps://git.kernel.org/stable/c/2c054e17d9d41f1020376806c7f750834ced4dc5

01 Record index

CVE-2026-31700

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31700

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References