CVE-2026-31739

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31739", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.138Z", "datePublished": "2026-05-01T14:14:35.551Z", "dateUpdated": "2026-10-19T19:06:07.448Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:24:55.007Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - Add missing CRYPTO_ALG_ASYNC\n\nThe tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its\nasynchronous algorithms, causing the crypto API to select them for users\nthat request only synchronous algorithms. This causes crashes (at\nleast). Fix this by adding the flag like what the other drivers do.\nAlso remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just\nget ignored and overridden by the registration function anyway."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable Tegra async hash/HMAC algorithms can be reached through network-facing SUNRPC/RPCSEC_GSS/NFS paths that request synchronous HMAC algorithms and then process attacker-supplied RPC messages.\nAC:L - Once the affected Tegra crypto driver is registered and a vulnerable network service uses RPCSEC_GSS, the attacker can trigger the bad async completion path with ordinary protocol messages; no race or hard-to-control condition is required.\nPR:L - The strongest network path requires a valid RPCSEC_GSS/Kerberos context or equivalent low-privileged authenticated access, but not administrative privileges on the target.\nUI:N - For a network service such as NFS/RPCSEC_GSS, exploitation is triggered by remote protocol traffic and does not require a local user action on the target.\nS:U - The impact remains within the kernel/security authority of the affected host and does not cross a hypervisor, IOMMU, or separate security scope boundary.\nC:H - The bug can cause asynchronous completion to use request memory after a synchronous caller has freed or unwound it, creating a use-after-free condition that can plausibly expose arbitrary kernel memory.\nI:H - The same use-after-free memory corruption can plausibly be shaped into arbitrary kernel memory corruption or control-flow impact, so high integrity impact is warranted.\nA:H - The commit explicitly notes crashes, and the async completion of freed or invalid request state can reliably oops or panic the kernel."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "versions": [{"version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "bdbf027a4504b4a86740de6beb6d18a957331839", "status": "affected", "versionType": "git"}, {"version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "3aea268b6d5cde3b087df9eeecc3bc620aa09513", "status": "affected", "versionType": "git"}, {"version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "429d05565eb19ee545d8a8395991372adbe4daf3", "status": "affected", "versionType": "git"}, {"version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "4b56770d345524fc2acc143a2b85539cf7d74bc1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "versions": [{"version": "6.10", "status": "affected"}, {"version": "0", "lessThan": "6.10", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.81", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.22", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.12", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.81"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.22"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.19.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/bdbf027a4504b4a86740de6beb6d18a957331839"}, {"url": "https://git.kernel.org/stable/c/3aea268b6d5cde3b087df9eeecc3bc620aa09513"}, {"url": "https://git.kernel.org/stable/c/429d05565eb19ee545d8a8395991372adbe4daf3"}, {"url": "https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1"}], "title": "crypto: tegra - Add missing CRYPTO_ALG_ASYNC", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31739", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:12:55.319558Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T19:06:07.448Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31739", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:12:55.319558Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:12:55.858Z"}}], "cna": {"title": "crypto: tegra - Add missing CRYPTO_ALG_ASYNC", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable Tegra async hash/HMAC algorithms can be reached through network-facing SUNRPC/RPCSEC_GSS/NFS paths that request synchronous HMAC algorithms and then process attacker-supplied RPC messages.\nAC:L - Once the affected Tegra crypto driver is registered and a vulnerable network service uses RPCSEC_GSS, the attacker can trigger the bad async completion path with ordinary protocol messages; no race or hard-to-control condition is required.\nPR:L - The strongest network path requires a valid RPCSEC_GSS/Kerberos context or equivalent low-privileged authenticated access, but not administrative privileges on the target.\nUI:N - For a network service such as NFS/RPCSEC_GSS, exploitation is triggered by remote protocol traffic and does not require a local user action on the target.\nS:U - The impact remains within the kernel/security authority of the affected host and does not cross a hypervisor, IOMMU, or separate security scope boundary.\nC:H - The bug can cause asynchronous completion to use request memory after a synchronous caller has freed or unwound it, creating a use-after-free condition that can plausibly expose arbitrary kernel memory.\nI:H - The same use-after-free memory corruption can plausibly be shaped into arbitrary kernel memory corruption or control-flow impact, so high integrity impact is warranted.\nA:H - The commit explicitly notes crashes, and the async completion of freed or invalid request state can reliably oops or panic the kernel."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "bdbf027a4504b4a86740de6beb6d18a957331839", "versionType": "git"}, {"status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "3aea268b6d5cde3b087df9eeecc3bc620aa09513", "versionType": "git"}, {"status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "429d05565eb19ee545d8a8395991372adbe4daf3", "versionType": "git"}, {"status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "lessThan": "4b56770d345524fc2acc143a2b85539cf7d74bc1", "versionType": "git"}], "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.10"}, {"status": "unaffected", "version": "0", "lessThan": "6.10", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.81", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.22", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.12", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/bdbf027a4504b4a86740de6beb6d18a957331839"}, {"url": "https://git.kernel.org/stable/c/3aea268b6d5cde3b087df9eeecc3bc620aa09513"}, {"url": "https://git.kernel.org/stable/c/429d05565eb19ee545d8a8395991372adbe4daf3"}, {"url": "https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - Add missing CRYPTO_ALG_ASYNC\n\nThe tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its\nasynchronous algorithms, causing the crypto API to select them for users\nthat request only synchronous algorithms. This causes crashes (at\nleast). Fix this by adding the flag like what the other drivers do.\nAlso remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just\nget ignored and overridden by the registration function anyway."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.81", "versionStartIncluding": "6.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "6.10"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:24:55.007Z"}}}, "cveMetadata": {"cveId": "CVE-2026-31739", "state": "PUBLISHED", "dateUpdated": "2026-10-19T19:06:07.448Z", "dateReserved": "2026-03-09T15:48:24.138Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-01T14:14:35.551Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "bdbf027a4504b4a86740de6beb6d18a957331839", "status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "versionType": "git"}, {"lessThan": "3aea268b6d5cde3b087df9eeecc3bc620aa09513", "status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "versionType": "git"}, {"lessThan": "429d05565eb19ee545d8a8395991372adbe4daf3", "status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "versionType": "git"}, {"lessThan": "4b56770d345524fc2acc143a2b85539cf7d74bc1", "status": "affected", "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/tegra/tegra-se-aes.c", "drivers/crypto/tegra/tegra-se-hash.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.10"}, {"lessThan": "6.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.81", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.22", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "152F22C9-12F1-4E51-A98B-BC5F10DD76FD", "versionEndExcluding": "6.12.81", "versionStartIncluding": "6.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9DF8BCE-36D3-475D-9D21-19E4F02F9029", "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A2B9540-02D5-41B4-B16A-82AF66FD4F36", "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - Add missing CRYPTO_ALG_ASYNC\n\nThe tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its\nasynchronous algorithms, causing the crypto API to select them for users\nthat request only synchronous algorithms. This causes crashes (at\nleast). Fix this by adding the flag like what the other drivers do.\nAlso remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just\nget ignored and overridden by the registration function anyway."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\ncrypto: tegra - A\u00f1adir CRYPTO_ALG_ASYNC faltante\n\nEl controlador criptogr\u00e1fico tegra no pudo establecer el CRYPTO_ALG_ASYNC en sus algoritmos as\u00edncronos, provocando que la API criptogr\u00e1fica los seleccionara para usuarios que solicitan solo algoritmos s\u00edncronos. Esto provoca fallos (al menos). Corrige esto a\u00f1adiendo el indicador como hacen los otros controladores. Tambi\u00e9n elimina los indicadores CRYPTO_ALG_TYPE_* innecesarios, ya que esos simplemente son ignorados y sobrescritos por la funci\u00f3n de registro de todos modos."}], "id": "CVE-2026-31739", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-31739", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:12:55.319558Z", "version": "2.0.3"}}]}, "published": "2026-05-01T15:16:36.600", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3aea268b6d5cde3b087df9eeecc3bc620aa09513"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/429d05565eb19ee545d8a8395991372adbe4daf3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bdbf027a4504b4a86740de6beb6d18a957331839"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-617"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC", "id": "2464379", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464379"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-166", "details": ["A flaw was found in the Linux kernel's tegra crypto driver. The driver failed to correctly set a flag for its asynchronous cryptographic algorithms. This oversight could lead to the crypto API selecting asynchronous algorithms when a user specifically requests synchronous ones. Consequently, this mismatch can cause system crashes, resulting in a Denial of Service (DoS)."], "name": "CVE-2026-31739", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31739\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31739\nhttps://lore.kernel.org/linux-cve-announce/2026050139-CVE-2026-31739-4bc1@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0880bb3b00c855fc244b7177ffdaafef4d0aa1e0,bdbf027a4504b4a86740de6beb6d18a957331839)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0880bb3b00c855fc244b7177ffdaafef4d0aa1e0,3aea268b6d5cde3b087df9eeecc3bc620aa09513)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0880bb3b00c855fc244b7177ffdaafef4d0aa1e0,429d05565eb19ee545d8a8395991372adbe4daf3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0880bb3b00c855fc244b7177ffdaafef4d0aa1e0,4b56770d345524fc2acc143a2b85539cf7d74bc1)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.81,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.22,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19.12,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-01T19:15:23.984925+00:00", "updated": "2026-10-23T08:45:16.396127+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}