01 Record

CVE-2026-31788

xen/privcmd: restrict usage in unprivileged domU

HighPUBLISHEDCNA: Linux

CNA base score8.2 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

View raw JSON

02 Description

xen/privcmd: restrict usage in unprivileged domU

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.15% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.1% of scored records. A rank, not a probability.
NVD base score: 8.2 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-03-25 10:25Z5 MO AGO

Last updated

2026-08-05 12:25Z1 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-266Incorrect Privilege AssignmentBase

Data version

5.2

Document digest

574b172bb65f3b0b8dab26588a63c99e22ab1095476b2477d37d0fc62c3224ab

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 4eb245ff0d33b618e097a2c23de5df56d4ad6969, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 3ee5b9e3de4b8bdd74183d83205481c91a9effc8, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 87a803edb2ded911cb587c53bff179d2a2ed2a28, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 1879319d790f7d57622cdc22807b60ea78b56b6d, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 78432d8f0372c71c518096395537fa12be7ff24e, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 389bae9a4409934e8b8d4dbdaaf02a3ae71cf8e4, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < cbede2e833da1893afbea9b3ff29b5dda23a4a91, 1c5de1939c204bde9cce87f4eb3d26e9f9eb732b to < 453b8fb68f3641fea970db88b7d9a153ed2a37e8, 2.6.37—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/4eb245ff0d33b618e097a2c23de5df56d4ad6969
git.kernel.orghttps://git.kernel.org/stable/c/3ee5b9e3de4b8bdd74183d83205481c91a9effc8
git.kernel.orghttps://git.kernel.org/stable/c/87a803edb2ded911cb587c53bff179d2a2ed2a28
git.kernel.orghttps://git.kernel.org/stable/c/1879319d790f7d57622cdc22807b60ea78b56b6d
git.kernel.orghttps://git.kernel.org/stable/c/78432d8f0372c71c518096395537fa12be7ff24e
git.kernel.orghttps://git.kernel.org/stable/c/389bae9a4409934e8b8d4dbdaaf02a3ae71cf8e4
git.kernel.orghttps://git.kernel.org/stable/c/cbede2e833da1893afbea9b3ff29b5dda23a4a91
git.kernel.orghttps://git.kernel.org/stable/c/453b8fb68f3641fea970db88b7d9a153ed2a37e8
xenbits.xen.orghttp://xenbits.xen.org/xsa/advisory-482.html
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/03/24/2
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/03/24/3
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/03/24/4
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/03/24/5
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/03/26/4

01 Record index

CVE-2026-31788

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31788

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References