CVE-2026-31758

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.13% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 2.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-05-01 14:14Z4 MO AGO

Last updated

2026-08-05 12:24Z1 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-416Use After FreeVariant
• CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

737843141c5b2a60544eba404201bf38d0f8ae5a52ab340fd466c4c43da9595b

• git.kernel.orghttps://git.kernel.org/stable/c/959ef329071136e4335b54822fe2f607659b4569
• git.kernel.orghttps://git.kernel.org/stable/c/e189d443767f7cd390c52f2e122e1fc41c7562d6
• git.kernel.orghttps://git.kernel.org/stable/c/7fa8f61bab3fb75b5deba8a0f3abb74dc5068d9f
• git.kernel.orghttps://git.kernel.org/stable/c/95e09b07e50290254b28b8395509473104518f8c
• git.kernel.orghttps://git.kernel.org/stable/c/d13318dec0c1e0e2ac16f8ecbd522db14cea4bb1
• git.kernel.orghttps://git.kernel.org/stable/c/977b632db51d231dec0bc571089a5c2402674139
• git.kernel.orghttps://git.kernel.org/stable/c/d40198de50232e04c14c6e2092e896766c95ea48
• git.kernel.orghttps://git.kernel.org/stable/c/8a768552f7a8276fb9e01d49773d2094ace7c8f1