[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31411":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":46,"related":47,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":62,"kevs":105,"epss":106,"epss_history":109,"metrics":369,"affected":375},"CVE-2026-31411","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atm: fix crash due to unvalidated vcc pointer in sigd_send()\n\nReproducer available at [1].\n\nThe ATM send path (sendmsg -> vcc_sendmsg -> sigd_send) reads the vcc\npointer from msg->vcc and uses it directly without any validation. This\npointer comes from userspace via sendmsg() and can be arbitrarily forged:\n\n    int fd = socket(AF_ATMSVC, SOCK_DGRAM, 0);\n    ioctl(fd, ATMSIGD_CTRL);  // become ATM signaling daemon\n    struct msghdr msg = { .msg_iov = &iov, ... };\n    *(unsigned long *)(buf + 4) = 0xdeadbeef;  // fake vcc pointer\n    sendmsg(fd, &msg, 0);  // kernel dereferences 0xdeadbeef\n\nIn normal operation, the kernel sends the vcc pointer to the signaling\ndaemon via sigd_enq() when processing operations like connect(), bind(),\nor listen(). The daemon is expected to return the same pointer when\nresponding. However, a malicious daemon can send arbitrary pointer values.\n\nFix this by introducing find_get_vcc() which validates the pointer by\nsearching through vcc_hash (similar to how sigd_close() iterates over\nall VCCs), and acquires a reference via sock_hold() if found.\n\nSince struct atm_vcc embeds struct sock as its first member, they share\nthe same lifetime. Therefore using sock_hold/sock_put is sufficient to\nkeep the vcc alive while it is being used.\n\nNote that there may be a race with sigd_close() which could mark the vcc\nwith various flags (e.g., ATM_VF_RELEASED) after find_get_vcc() returns.\nHowever, sock_hold() guarantees the memory remains valid, so this race\nonly affects the logical state, not memory safety.\n\n[1]: https://gist.github.com/mrpre/1ba5949c45529c511152e2f4c755b0f3",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44],{"_key":25},"DEBIAN-CVE-2026-31411",{"_key":27},"SUSE-SU-2026:21834-1",{"_key":29},"SUSE-SU-2026:2238-1",{"_key":31},"USN-8492-4",{"_key":33},"RHSA-2026:33285",{"_key":35},"RHSA-2026:39082",{"_key":37},"RHSA-2026:39083",{"_key":39},"UBUNTU-CVE-2026-31411",{"_key":41},"USN-8492-5",{"_key":43},"USN-8575-1",{"_key":45},"USN-8576-1",[],[48,49],{"_key":27},{"_key":29},"2026-04-08T13:06:17.800Z","2026-07-14T12:47:31.032Z","Analyzed",{"cisa_kev":54,"cisa_ransomware":54,"cisa_vendor":9,"epss_severity":55,"epss_score":56,"severity":57,"severity_score":58,"severity_version":59,"severity_source":60,"severity_vector":61,"severity_status":52},false,"low",0.00125,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[63,69,73,77,81,85,89,93,97,101],{"url":64,"sources":65,"tags":67},"https://git.kernel.org/stable/c/c96549d07dfdd51aadf0722cfb40711574424840",[66,60],"cve.org",[68],"Patch",{"url":70,"sources":71,"tags":72},"https://git.kernel.org/stable/c/1c8bda3df028d5e54134077dcd09f46ca8cfceb5",[66,60],[68],{"url":74,"sources":75,"tags":76},"https://git.kernel.org/stable/c/3e1a8b00095246a9a2b46b57f6d471c6d3c00ed2",[66,60],[68],{"url":78,"sources":79,"tags":80},"https://git.kernel.org/stable/c/e3f80666c2739296c3b69a127300455c43aa1067",[66,60],[68],{"url":82,"sources":83,"tags":84},"https://git.kernel.org/stable/c/21c303fec138c002f90ed33bce60e807d53072bb",[66,60],[68],{"url":86,"sources":87,"tags":88},"https://git.kernel.org/stable/c/69d3f9ee5489e6e8b66defcfa226e91d82393297",[66,60],[68],{"url":90,"sources":91,"tags":92},"https://git.kernel.org/stable/c/440c9a5fc477a8ee259d8bf669531250b8398651",[66,60],[68],{"url":94,"sources":95,"tags":96},"https://git.kernel.org/stable/c/ae88a5d2f29b69819dc7b04086734439d074a643",[66,60],[68],{"url":98,"sources":99,"tags":100},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[66],[],{"url":102,"sources":103,"tags":104},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[66],[],[],{"date":107,"score":56,"percentile":108},"2026-07-05",0.02544,[110,114,117,120,123,126,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,209,212,215,218,221,223,226,229,232,235,238,242,245,248,251,254,257,260,262,265,268,271,274,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,340,343,346,349,352,355,358,360,362,364,366,368],{"date":111,"score":112,"percentile":113},"2026-04-09",0.00024,0.06702,{"date":115,"score":112,"percentile":116},"2026-04-10",0.06714,{"date":118,"score":112,"percentile":119},"2026-04-11",0.06701,{"date":121,"score":112,"percentile":122},"2026-04-12",0.06694,{"date":124,"score":112,"percentile":125},"2026-04-13",0.06685,{"date":127,"score":128,"percentile":129},"2026-04-14",0.00032,0.09095,{"date":131,"score":128,"percentile":132},"2026-04-15",0.0911,{"date":134,"score":128,"percentile":135},"2026-04-16",0.09117,{"date":137,"score":128,"percentile":138},"2026-04-17",0.09101,{"date":140,"score":128,"percentile":141},"2026-04-18",0.09098,{"date":143,"score":128,"percentile":144},"2026-04-19",0.09068,{"date":146,"score":128,"percentile":147},"2026-04-20",0.09055,{"date":149,"score":128,"percentile":150},"2026-04-21",0.09252,{"date":152,"score":128,"percentile":153},"2026-04-22",0.09287,{"date":155,"score":128,"percentile":156},"2026-04-23",0.09309,{"date":158,"score":128,"percentile":159},"2026-04-24",0.09294,{"date":161,"score":128,"percentile":162},"2026-04-25",0.0926,{"date":164,"score":128,"percentile":165},"2026-04-26",0.09229,{"date":167,"score":128,"percentile":168},"2026-04-27",0.09209,{"date":170,"score":128,"percentile":171},"2026-04-28",0.09197,{"date":173,"score":128,"percentile":174},"2026-04-29",0.09201,{"date":176,"score":128,"percentile":177},"2026-04-30",0.09206,{"date":179,"score":128,"percentile":180},"2026-05-01",0.09146,{"date":182,"score":128,"percentile":183},"2026-05-02",0.09188,{"date":185,"score":128,"percentile":186},"2026-05-03",0.09164,{"date":188,"score":128,"percentile":189},"2026-05-04",0.09121,{"date":191,"score":128,"percentile":192},"2026-05-05",0.09112,{"date":194,"score":128,"percentile":195},"2026-05-06",0.09129,{"date":197,"score":128,"percentile":198},"2026-05-07",0.09285,{"date":200,"score":128,"percentile":201},"2026-05-08",0.09315,{"date":203,"score":128,"percentile":204},"2026-05-09",0.09352,{"date":206,"score":207,"percentile":208},"2026-05-10",0.00035,0.10366,{"date":210,"score":207,"percentile":211},"2026-05-11",0.10346,{"date":213,"score":207,"percentile":214},"2026-05-12",0.10387,{"date":216,"score":207,"percentile":217},"2026-05-13",0.10403,{"date":219,"score":207,"percentile":220},"2026-05-14",0.10444,{"date":222,"score":207,"percentile":220},"2026-05-15",{"date":224,"score":207,"percentile":225},"2026-05-16",0.10466,{"date":227,"score":207,"percentile":228},"2026-05-17",0.10448,{"date":230,"score":207,"percentile":231},"2026-05-18",0.10414,{"date":233,"score":207,"percentile":234},"2026-05-19",0.10371,{"date":236,"score":207,"percentile":237},"2026-05-20",0.10364,{"date":239,"score":240,"percentile":241},"2026-05-21",0.00015,0.03339,{"date":243,"score":240,"percentile":244},"2026-05-22",0.03512,{"date":246,"score":240,"percentile":247},"2026-05-23",0.03499,{"date":249,"score":240,"percentile":250},"2026-05-24",0.03483,{"date":252,"score":240,"percentile":253},"2026-05-25",0.03463,{"date":255,"score":240,"percentile":256},"2026-05-26",0.03446,{"date":258,"score":240,"percentile":259},"2026-05-27",0.0347,{"date":261,"score":240,"percentile":256},"2026-05-28",{"date":263,"score":240,"percentile":264},"2026-05-29",0.03453,{"date":266,"score":112,"percentile":267},"2026-05-30",0.07154,{"date":269,"score":112,"percentile":270},"2026-05-31",0.07143,{"date":272,"score":112,"percentile":273},"2026-06-01",0.071,{"date":275,"score":276,"percentile":277},"2026-06-02",0.00027,0.08103,{"date":279,"score":276,"percentile":280},"2026-06-03",0.08048,{"date":282,"score":276,"percentile":283},"2026-06-04",0.08062,{"date":285,"score":207,"percentile":286},"2026-06-05",0.10676,{"date":288,"score":207,"percentile":289},"2026-06-06",0.107,{"date":291,"score":207,"percentile":292},"2026-06-07",0.10662,{"date":294,"score":207,"percentile":295},"2026-06-08",0.10578,{"date":297,"score":128,"percentile":298},"2026-06-09",0.09624,{"date":300,"score":128,"percentile":301},"2026-06-10",0.09669,{"date":303,"score":128,"percentile":304},"2026-06-11",0.09713,{"date":306,"score":128,"percentile":307},"2026-06-12",0.09763,{"date":309,"score":128,"percentile":310},"2026-06-13",0.09765,{"date":312,"score":128,"percentile":313},"2026-06-14",0.09754,{"date":315,"score":56,"percentile":316},"2026-06-15",0.02505,{"date":318,"score":56,"percentile":319},"2026-06-16",0.02512,{"date":321,"score":56,"percentile":322},"2026-06-17",0.0252,{"date":324,"score":56,"percentile":325},"2026-06-18",0.02519,{"date":327,"score":56,"percentile":328},"2026-06-19",0.02516,{"date":330,"score":56,"percentile":331},"2026-06-20",0.02514,{"date":333,"score":56,"percentile":334},"2026-06-21",0.0251,{"date":336,"score":56,"percentile":337},"2026-06-22",0.02506,{"date":339,"score":56,"percentile":334},"2026-06-23",{"date":341,"score":56,"percentile":342},"2026-06-24",0.02513,{"date":344,"score":56,"percentile":345},"2026-06-25",0.02524,{"date":347,"score":56,"percentile":348},"2026-06-26",0.02536,{"date":350,"score":56,"percentile":351},"2026-06-27",0.02543,{"date":353,"score":56,"percentile":354},"2026-06-28",0.02546,{"date":356,"score":56,"percentile":357},"2026-06-29",0.02542,{"date":359,"score":56,"percentile":351},"2026-06-30",{"date":361,"score":56,"percentile":108},"2026-07-01",{"date":363,"score":56,"percentile":357},"2026-07-02",{"date":365,"score":56,"percentile":351},"2026-07-03",{"date":367,"score":56,"percentile":351},"2026-07-04",{"date":107,"score":56,"percentile":108},[370],{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":371,"cvss_v4_0":9},{"baseScore":58,"baseSeverity":372,"vectorString":61,"impactScore":373,"exploitabilityScore":374},"MEDIUM",6,4.6,[376,411],{"ecosystem":9,"name":377,"vendor":378,"product":378,"cpe_part":379,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":380},"Linux","linux","a",[381,388,391,394,397,400,403,406,409],{"version":382,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":386,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C c96549d07dfdd51aadf0722cfb40711574424840",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","c96549d07dfdd51aadf0722cfb40711574424840","excluding",{"version":389,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":390,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 1c8bda3df028d5e54134077dcd09f46ca8cfceb5","1c8bda3df028d5e54134077dcd09f46ca8cfceb5",{"version":392,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":393,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 3e1a8b00095246a9a2b46b57f6d471c6d3c00ed2","3e1a8b00095246a9a2b46b57f6d471c6d3c00ed2",{"version":395,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":396,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C e3f80666c2739296c3b69a127300455c43aa1067","e3f80666c2739296c3b69a127300455c43aa1067",{"version":398,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":399,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 21c303fec138c002f90ed33bce60e807d53072bb","21c303fec138c002f90ed33bce60e807d53072bb",{"version":401,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":402,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 69d3f9ee5489e6e8b66defcfa226e91d82393297","69d3f9ee5489e6e8b66defcfa226e91d82393297",{"version":404,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":405,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 440c9a5fc477a8ee259d8bf669531250b8398651","440c9a5fc477a8ee259d8bf669531250b8398651",{"version":407,"is_range":383,"range_type":66,"version_start":384,"version_start_type":385,"version_end":408,"version_end_type":387,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C ae88a5d2f29b69819dc7b04086734439d074a643","ae88a5d2f29b69819dc7b04086734439d074a643",{"version":410,"is_range":54,"range_type":66,"version_start":410,"version_start_type":385,"version_end":410,"version_end_type":385,"fixed_in":9},"2.6.12",{"ecosystem":9,"name":412,"vendor":378,"product":413,"cpe_part":379,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":414},"Linux Kernel","linux kernel",[415,420,424,428,432,436,440,444,446,448,450,452,454,456,458,460,462,464],{"version":416,"is_range":383,"range_type":417,"version_start":418,"version_start_type":385,"version_end":419,"version_end_type":387,"fixed_in":9},"gte2.6.12.1_lt5.10.252","cpe","2.6.12.1","5.10.252",{"version":421,"is_range":383,"range_type":417,"version_start":422,"version_start_type":385,"version_end":423,"version_end_type":387,"fixed_in":9},"gte5.11_lt5.15.202","5.11","5.15.202",{"version":425,"is_range":383,"range_type":417,"version_start":426,"version_start_type":385,"version_end":427,"version_end_type":387,"fixed_in":9},"gte5.16_lt6.1.165","5.16","6.1.165",{"version":429,"is_range":383,"range_type":417,"version_start":430,"version_start_type":385,"version_end":431,"version_end_type":387,"fixed_in":9},"gte6.2_lt6.6.128","6.2","6.6.128",{"version":433,"is_range":383,"range_type":417,"version_start":434,"version_start_type":385,"version_end":435,"version_end_type":387,"fixed_in":9},"gte6.7_lt6.12.75","6.7","6.12.75",{"version":437,"is_range":383,"range_type":417,"version_start":438,"version_start_type":385,"version_end":439,"version_end_type":387,"fixed_in":9},"gte6.13_lt6.18.14","6.13","6.18.14",{"version":441,"is_range":383,"range_type":417,"version_start":442,"version_start_type":385,"version_end":443,"version_end_type":387,"fixed_in":9},"gte6.19_lt6.19.4","6.19","6.19.4",{"version":445,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc2",{"version":447,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc3",{"version":449,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc4",{"version":451,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc5",{"version":453,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":455,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":457,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":459,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":461,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":463,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":465,"is_range":54,"range_type":417,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]