[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31474":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":52,"related":53,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":67,"kevs":119,"epss":120,"epss_history":123,"metrics":335,"affected":343},"CVE-2026-31474","In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: fix tx.buf use-after-free in isotp_sendmsg()\n\nisotp_sendmsg() uses only cmpxchg() on so->tx.state to serialize access\nto so->tx.buf. isotp_release() waits for ISOTP_IDLE via\nwait_event_interruptible() and then calls kfree(so->tx.buf).\n\nIf a signal interrupts the wait_event_interruptible() inside close()\nwhile tx.state is ISOTP_SENDING, the loop exits early and release\nproceeds to force ISOTP_SHUTDOWN and continues to kfree(so->tx.buf)\nwhile sendmsg may still be reading so->tx.buf for the final CAN frame\nin isotp_fill_dataframe().\n\nThe so->tx.buf can be allocated once when the standard tx.buf length needs\nto be extended. Move the kfree() of this potentially extended tx.buf to\nsk_destruct time when either isotp_sendmsg() and isotp_release() are done.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":25,"likelihood_of_exploit":26,"capec":27},"CWE-364","Signal Handler Race Condition","The product uses a signal handler that introduces a race condition.","Incomplete","Base","Medium",[],[],[],[],[32,34,36,38,40,42,44,46,48,50],{"_key":33},"MGASA-2026-0108",{"_key":35},"MGASA-2026-0110",{"_key":37},"DEBIAN-CVE-2026-31474",{"_key":39},"SUSE-SU-2026:3130-1",{"_key":41},"RHSA-2026:27288",{"_key":43},"RHSA-2026:27731",{"_key":45},"RHSA-2026:27789",{"_key":47},"UBUNTU-CVE-2026-31474",{"_key":49},"USN-8567-1",{"_key":51},"USN-8574-1",[],[54],{"_key":39},"2026-04-22T13:54:03.100Z","2026-07-15T01:09:14.681Z","Analyzed",{"cisa_kev":59,"cisa_ransomware":59,"cisa_vendor":9,"epss_severity":60,"epss_score":61,"severity":62,"severity_score":63,"severity_version":64,"severity_source":65,"severity_vector":66,"severity_status":57},false,"low",0.00104,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[68,74,78,82,86,90,96,101,106,111,115],{"url":69,"sources":70,"tags":72},"https://git.kernel.org/stable/c/cb3d6efa78460e6d50bf68806d0db66265709f64",[65,71],"nvd",[73],"Patch",{"url":75,"sources":76,"tags":77},"https://git.kernel.org/stable/c/9649d051e54413049c009638ec1dc23962c884a4",[65,71],[73],{"url":79,"sources":80,"tags":81},"https://git.kernel.org/stable/c/eec8a1b18a79600bd4419079dc0026c1db72a830",[65,71],[73],{"url":83,"sources":84,"tags":85},"https://git.kernel.org/stable/c/2e62e7051eca75a7f2e3d52d62ec10d7d7aa358c",[65,71],[73],{"url":87,"sources":88,"tags":89},"https://git.kernel.org/stable/c/424e95d62110cdbc8fd12b40918f37e408e35a92",[65,71],[73],{"url":91,"sources":92,"tags":93},"https://access.redhat.com/security/cve/CVE-2026-31474",[65],[94,95],"VDB Entry","X Refsource REDHAT",{"url":97,"sources":98,"tags":99},"https://bugzilla.redhat.com/show_bug.cgi?id=2460646",[65],[100,95],"Issue Tracking",{"url":102,"sources":103,"tags":104},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31474.json",[65],[105],"X Sadp Csaf Vex",{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2026:27731",[65],[110,95],"Vendor Advisory",{"url":112,"sources":113,"tags":114},"https://access.redhat.com/errata/RHSA-2026:27288",[65],[110,95],{"url":116,"sources":117,"tags":118},"https://access.redhat.com/errata/RHSA-2026:27789",[65],[110,95],[],{"date":121,"score":61,"percentile":122},"2026-07-05",0.01227,[124,128,131,134,137,140,144,147,150,153,156,159,161,164,167,169,172,175,178,180,182,185,188,191,194,197,199,202,205,208,211,214,218,221,224,227,230,233,236,239,242,245,248,250,253,256,258,261,264,267,270,273,276,279,282,284,287,290,293,295,298,301,304,306,309,312,315,318,320,323,326,328,331,334],{"date":125,"score":126,"percentile":127},"2026-04-23",0.00018,0.04774,{"date":129,"score":126,"percentile":130},"2026-04-24",0.04778,{"date":132,"score":126,"percentile":133},"2026-04-25",0.04818,{"date":135,"score":126,"percentile":136},"2026-04-26",0.04816,{"date":138,"score":126,"percentile":139},"2026-04-27",0.04813,{"date":141,"score":142,"percentile":143},"2026-04-28",0.00013,0.02363,{"date":145,"score":142,"percentile":146},"2026-04-29",0.02379,{"date":148,"score":142,"percentile":149},"2026-04-30",0.02382,{"date":151,"score":142,"percentile":152},"2026-05-01",0.02378,{"date":154,"score":142,"percentile":155},"2026-05-02",0.02364,{"date":157,"score":142,"percentile":158},"2026-05-03",0.02369,{"date":160,"score":142,"percentile":143},"2026-05-04",{"date":162,"score":142,"percentile":163},"2026-05-05",0.02353,{"date":165,"score":142,"percentile":166},"2026-05-06",0.02344,{"date":168,"score":142,"percentile":143},"2026-05-07",{"date":170,"score":142,"percentile":171},"2026-05-08",0.02376,{"date":173,"score":142,"percentile":174},"2026-05-09",0.02403,{"date":176,"score":142,"percentile":177},"2026-05-10",0.02399,{"date":179,"score":142,"percentile":177},"2026-05-11",{"date":181,"score":142,"percentile":177},"2026-05-12",{"date":183,"score":142,"percentile":184},"2026-05-13",0.02411,{"date":186,"score":142,"percentile":187},"2026-05-14",0.02424,{"date":189,"score":142,"percentile":190},"2026-05-15",0.02432,{"date":192,"score":142,"percentile":193},"2026-05-16",0.02446,{"date":195,"score":142,"percentile":196},"2026-05-17",0.02443,{"date":198,"score":142,"percentile":187},"2026-05-18",{"date":200,"score":142,"percentile":201},"2026-05-19",0.0241,{"date":203,"score":142,"percentile":204},"2026-05-20",0.02406,{"date":206,"score":142,"percentile":207},"2026-05-21",0.02389,{"date":209,"score":142,"percentile":210},"2026-05-22",0.02535,{"date":212,"score":142,"percentile":213},"2026-05-23",0.02529,{"date":215,"score":216,"percentile":217},"2026-05-24",0.00015,0.03619,{"date":219,"score":216,"percentile":220},"2026-05-25",0.03595,{"date":222,"score":216,"percentile":223},"2026-05-26",0.03579,{"date":225,"score":216,"percentile":226},"2026-05-27",0.03606,{"date":228,"score":216,"percentile":229},"2026-05-28",0.03581,{"date":231,"score":216,"percentile":232},"2026-05-29",0.03593,{"date":234,"score":216,"percentile":235},"2026-05-30",0.03616,{"date":237,"score":216,"percentile":238},"2026-05-31",0.03602,{"date":240,"score":216,"percentile":241},"2026-06-01",0.03541,{"date":243,"score":216,"percentile":244},"2026-06-02",0.03519,{"date":246,"score":216,"percentile":247},"2026-06-03",0.03509,{"date":249,"score":216,"percentile":247},"2026-06-04",{"date":251,"score":216,"percentile":252},"2026-06-05",0.03516,{"date":254,"score":216,"percentile":255},"2026-06-06",0.0353,{"date":257,"score":216,"percentile":252},"2026-06-07",{"date":259,"score":216,"percentile":260},"2026-06-08",0.03495,{"date":262,"score":216,"percentile":263},"2026-06-09",0.035,{"date":265,"score":216,"percentile":266},"2026-06-10",0.03493,{"date":268,"score":216,"percentile":269},"2026-06-11",0.03517,{"date":271,"score":216,"percentile":272},"2026-06-12",0.03531,{"date":274,"score":216,"percentile":275},"2026-06-13",0.03521,{"date":277,"score":216,"percentile":278},"2026-06-14",0.03535,{"date":280,"score":281,"percentile":213},"2026-06-15",0.00125,{"date":283,"score":281,"percentile":210},"2026-06-16",{"date":285,"score":281,"percentile":286},"2026-06-17",0.02544,{"date":288,"score":281,"percentile":289},"2026-06-18",0.02541,{"date":291,"score":281,"percentile":292},"2026-06-19",0.02539,{"date":294,"score":281,"percentile":210},"2026-06-20",{"date":296,"score":281,"percentile":297},"2026-06-21",0.02533,{"date":299,"score":281,"percentile":300},"2026-06-22",0.02528,{"date":302,"score":281,"percentile":303},"2026-06-23",0.02534,{"date":305,"score":281,"percentile":297},"2026-06-24",{"date":307,"score":281,"percentile":308},"2026-06-25",0.02547,{"date":310,"score":281,"percentile":311},"2026-06-26",0.02557,{"date":313,"score":281,"percentile":314},"2026-06-27",0.02562,{"date":316,"score":281,"percentile":317},"2026-06-28",0.02566,{"date":319,"score":281,"percentile":314},"2026-06-29",{"date":321,"score":61,"percentile":322},"2026-06-30",0.01238,{"date":324,"score":61,"percentile":325},"2026-07-01",0.01235,{"date":327,"score":61,"percentile":325},"2026-07-02",{"date":329,"score":61,"percentile":330},"2026-07-03",0.01231,{"date":332,"score":61,"percentile":333},"2026-07-04",0.01228,{"date":121,"score":61,"percentile":122},[336,341],{"source":65,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":337,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":338,"vectorString":66,"impactScore":339,"exploitabilityScore":340},"HIGH",9.8,4.6,{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":342,"cvss_v4_0":9},{"baseScore":63,"baseSeverity":338,"vectorString":66,"impactScore":339,"exploitabilityScore":340},[344,370],{"ecosystem":9,"name":345,"vendor":346,"product":346,"cpe_part":347,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":348},"Linux","linux","a",[349,356,359,362,365,368],{"version":350,"is_range":351,"range_type":65,"version_start":352,"version_start_type":353,"version_end":354,"version_end_type":355,"fixed_in":9},">= 96d1c81e6a0478535342dff6c730adb076cd84e8, \u003C cb3d6efa78460e6d50bf68806d0db66265709f64",true,"96d1c81e6a0478535342dff6c730adb076cd84e8","including","cb3d6efa78460e6d50bf68806d0db66265709f64","excluding",{"version":357,"is_range":351,"range_type":65,"version_start":352,"version_start_type":353,"version_end":358,"version_end_type":355,"fixed_in":9},">= 96d1c81e6a0478535342dff6c730adb076cd84e8, \u003C 9649d051e54413049c009638ec1dc23962c884a4","9649d051e54413049c009638ec1dc23962c884a4",{"version":360,"is_range":351,"range_type":65,"version_start":352,"version_start_type":353,"version_end":361,"version_end_type":355,"fixed_in":9},">= 96d1c81e6a0478535342dff6c730adb076cd84e8, \u003C eec8a1b18a79600bd4419079dc0026c1db72a830","eec8a1b18a79600bd4419079dc0026c1db72a830",{"version":363,"is_range":351,"range_type":65,"version_start":352,"version_start_type":353,"version_end":364,"version_end_type":355,"fixed_in":9},">= 96d1c81e6a0478535342dff6c730adb076cd84e8, \u003C 2e62e7051eca75a7f2e3d52d62ec10d7d7aa358c","2e62e7051eca75a7f2e3d52d62ec10d7d7aa358c",{"version":366,"is_range":351,"range_type":65,"version_start":352,"version_start_type":353,"version_end":367,"version_end_type":355,"fixed_in":9},">= 96d1c81e6a0478535342dff6c730adb076cd84e8, \u003C 424e95d62110cdbc8fd12b40918f37e408e35a92","424e95d62110cdbc8fd12b40918f37e408e35a92",{"version":369,"is_range":59,"range_type":65,"version_start":369,"version_start_type":353,"version_end":369,"version_end_type":353,"fixed_in":9},"6.4",{"ecosystem":9,"name":371,"vendor":346,"product":372,"cpe_part":347,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":373},"Linux Kernel","linux kernel",[374,379,383,387,391,392,394,396,398,400,402,404],{"version":375,"is_range":351,"range_type":376,"version_start":377,"version_start_type":353,"version_end":378,"version_end_type":355,"fixed_in":9},"gte6.4.1_lt6.6.131","cpe","6.4.1","6.6.131",{"version":380,"is_range":351,"range_type":376,"version_start":381,"version_start_type":353,"version_end":382,"version_end_type":355,"fixed_in":9},"gte6.7_lt6.12.80","6.7","6.12.80",{"version":384,"is_range":351,"range_type":376,"version_start":385,"version_start_type":353,"version_end":386,"version_end_type":355,"fixed_in":9},"gte6.13_lt6.18.21","6.13","6.18.21",{"version":388,"is_range":351,"range_type":376,"version_start":389,"version_start_type":353,"version_end":390,"version_end_type":355,"fixed_in":9},"gte6.19_lt6.19.11","6.19","6.19.11",{"version":369,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":393,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":395,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":397,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":399,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":401,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":403,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":405,"is_range":59,"range_type":376,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]