Threats Tagged 'cve-2026-31787'

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: xfrm single-frag length not properly limited * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

A use-after-free vulnerability in the Linux kernel's CAN ISO-TP implementation (isotp_sendmsg) was resolved. The issue occurs when tx.buf is freed prematurely during socket release while still potentially being accessed, leading to memory corruption. This vulnerability affects multiple Linux kernel versions prior to 6.8.0 and related distributions. It has a high severity with a CVSS score of 7.8. A patch is available and should be applied to prevent potential system compromise.

A high severity use-after-free vulnerability (CVE-2026-31669) in the Linux kernel's Multipath TCP (MPTCP) implementation was resolved. The flaw involves incorrect socket memory allocation for MPTCP IPv6 subflow child sockets due to improper slab cache initialization, leading to potential memory corruption. This vulnerability could allow an attacker to cause system compromise with high impact on confidentiality, integrity, and availability. Multiple Linux kernel subsystems were updated to fix this and related issues. Official patches are available and included in updated Linux kernel versions. Users should apply these updates and reboot to mitigate the risk.