[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31607":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":34,"aliases":35,"duplicate_of":9,"upstream":36,"downstream":37,"duplicates":78,"related":79,"reserved_at":9,"published_at":86,"modified_at":87,"state":88,"summary":89,"references_raw":98,"kevs":178,"epss":179,"epss_history":182,"metrics":401,"affected":408},"CVE-2026-31607","In the Linux kernel, the following vulnerability has been resolved:\n\nusbip: validate number_of_packets in usbip_pack_ret_submit()\n\nWhen a USB/IP client receives a RET_SUBMIT response,\nusbip_pack_ret_submit() unconditionally overwrites\nurb->number_of_packets from the network PDU. This value is\nsubsequently used as the loop bound in usbip_recv_iso() and\nusbip_pad_iso() to iterate over urb->iso_frame_desc[], a flexible\narray whose size was fixed at URB allocation time based on the\n*original* number_of_packets from the CMD_SUBMIT.\n\nA malicious USB/IP server can set number_of_packets in the response\nto a value larger than what was originally submitted, causing a heap\nout-of-bounds write when usbip_recv_iso() writes to\nurb->iso_frame_desc[i] beyond the allocated region.\n\nKASAN confirmed this with kernel 7.0.0-rc5:\n\n  BUG: KASAN: slab-out-of-bounds in usbip_recv_iso+0x46a/0x640\n  Write of size 4 at addr ffff888106351d40 by task vhci_rx/69\n\n  The buggy address is located 0 bytes to the right of\n   allocated 320-byte region [ffff888106351c00, ffff888106351d40)\n\nThe server side (stub_rx.c) and gadget side (vudc_rx.c) already\nvalidate number_of_packets in the CMD_SUBMIT path since commits\nc6688ef9f297 (\"usbip: fix stub_rx: harden CMD_SUBMIT path to handle\nmalicious input\") and b78d830f0049 (\"usbip: fix vudc_rx: harden\nCMD_SUBMIT path to handle malicious input\"). The server side validates\nagainst USBIP_MAX_ISO_PACKETS because no URB exists yet at that point.\nOn the client side we have the original URB, so we can use the tighter\nbound: the response must not exceed the original number_of_packets.\n\nThis mirrors the existing validation of actual_length against\ntransfer_buffer_length in usbip_recv_xbuff(), which checks the\nresponse value against the original allocation size.\n\nKelvin Mbogo's series (\"usb: usbip: fix integer overflow in\nusbip_recv_iso()\", v2) hardens the receive-side functions themselves;\nthis patch complements that work by catching the bad value at its\nsource -- in usbip_pack_ret_submit() before the overwrite -- and\nusing the tighter per-URB allocation bound rather than the global\nUSBIP_MAX_ISO_PACKETS limit.\n\nFix this by checking rpdu->number_of_packets against\nurb->number_of_packets in usbip_pack_ret_submit() before the\noverwrite. On violation, clamp to zero so that usbip_recv_iso() and\nusbip_pad_iso() safely return early.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":17,"likelihood_of_exploit":18,"capec":25},"CWE-805","Buffer Access with Incorrect Length Value","The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.","Incomplete",[26,30],{"id":27,"name":28,"techniques":29},"CAPEC-100","Overflow Buffers",[],{"id":31,"name":32,"techniques":33},"CAPEC-256","SOAP Array Overflow",[],[],[],[],[38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76],{"_key":39},"OPENSUSE-SU-2026:10703-1",{"_key":41},"SUSE-SU-2026:2317-1",{"_key":43},"SUSE-SU-2026:2195-1",{"_key":45},"SUSE-SU-2026:2238-1",{"_key":47},"USN-8490-2",{"_key":49},"USN-8492-4",{"_key":51},"DEBIAN-CVE-2026-31607",{"_key":53},"RHSA-2026:19568",{"_key":55},"RHSA-2026:19569",{"_key":57},"RHSA-2026:23224",{"_key":59},"RHSA-2026:24343",{"_key":61},"RHSA-2026:25095",{"_key":63},"RHSA-2026:41236",{"_key":65},"UBUNTU-CVE-2026-31607",{"_key":67},"USN-8492-5",{"_key":69},"USN-8527-1",{"_key":71},"USN-8528-1",{"_key":73},"USN-8529-1",{"_key":75},"USN-8548-1",{"_key":77},"USN-8569-1",[],[80,81,82,83,84],{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":85},"CGA-6G63-3M98-78M6","2026-04-24T14:42:29.468Z","2026-07-20T12:04:41.308Z","Modified",{"cisa_kev":90,"cisa_ransomware":90,"cisa_vendor":9,"epss_severity":91,"epss_score":92,"severity":93,"severity_score":94,"severity_version":95,"severity_source":96,"severity_vector":97,"severity_status":88},false,"low",0.00311,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[99,105,109,113,117,121,125,129,133,137,143,148,153,158,162,166,170,174],{"url":100,"sources":101,"tags":103},"https://git.kernel.org/stable/c/8d155e2d1c4102f74f82a2bf9c016164bb0f7384",[96,102],"nvd",[104],"Patch",{"url":106,"sources":107,"tags":108},"https://git.kernel.org/stable/c/906f16a836de13fe61f49cdce2f66f2dbd14caf4",[96,102],[104],{"url":110,"sources":111,"tags":112},"https://git.kernel.org/stable/c/ef8ebb1c637b4cfb61a9dd2e013376774ee2033b",[96,102],[104],{"url":114,"sources":115,"tags":116},"https://git.kernel.org/stable/c/5e1c4ece08ccdc197177631f111845a2c68eede3",[96,102],[104],{"url":118,"sources":119,"tags":120},"https://git.kernel.org/stable/c/2ab833a16a825373aad2ba7d54b572b277e95b71",[96,102],[104],{"url":122,"sources":123,"tags":124},"https://git.kernel.org/stable/c/885c8591784da6314f9aa82fa460ac69f9f79e5f",[96,102],[104],{"url":126,"sources":127,"tags":128},"https://git.kernel.org/stable/c/324262c38438255bf6bdbf6342ca47c0badaab76",[96,102],[],{"url":130,"sources":131,"tags":132},"https://git.kernel.org/stable/c/973f2c250289f5bf6cc146b98aa6fdde11fe50d6",[96,102],[],{"url":134,"sources":135,"tags":136},"https://git.kernel.org/stable/c/ce744264b06b97069b3722511ab355738311fee0",[96,102],[],{"url":138,"sources":139,"tags":140},"https://access.redhat.com/security/cve/CVE-2026-31607",[96],[141,142],"VDB Entry","X Refsource REDHAT",{"url":144,"sources":145,"tags":146},"https://bugzilla.redhat.com/show_bug.cgi?id=2461521",[96],[147,142],"Issue Tracking",{"url":149,"sources":150,"tags":151},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31607.json",[96],[152],"X Sadp Csaf Vex",{"url":154,"sources":155,"tags":156},"https://access.redhat.com/errata/RHSA-2026:25095",[96],[157,142],"Vendor Advisory",{"url":159,"sources":160,"tags":161},"https://access.redhat.com/errata/RHSA-2026:24343",[96],[157,142],{"url":163,"sources":164,"tags":165},"https://access.redhat.com/errata/RHSA-2026:19569",[96],[157,142],{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2026:23224",[96],[157,142],{"url":171,"sources":172,"tags":173},"https://access.redhat.com/errata/RHSA-2026:19568",[96],[157,142],{"url":175,"sources":176,"tags":177},"https://access.redhat.com/errata/RHSA-2026:41236",[96],[157,142],[],{"date":180,"score":92,"percentile":181},"2026-07-05",0.22957,[183,187,190,193,197,200,204,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,262,265,268,271,274,277,281,284,287,290,293,296,299,303,306,309,312,315,318,321,324,327,330,333,336,339,343,346,349,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,397,400],{"date":184,"score":185,"percentile":186},"2026-04-25",0.00018,0.04621,{"date":188,"score":185,"percentile":189},"2026-04-26",0.0462,{"date":191,"score":185,"percentile":192},"2026-04-27",0.04813,{"date":194,"score":195,"percentile":196},"2026-04-28",0.00055,0.16933,{"date":198,"score":195,"percentile":199},"2026-04-29",0.16922,{"date":201,"score":202,"percentile":203},"2026-04-30",0.00072,0.21649,{"date":205,"score":202,"percentile":203},"2026-05-01",{"date":207,"score":202,"percentile":208},"2026-05-02",0.21683,{"date":210,"score":202,"percentile":211},"2026-05-03",0.21641,{"date":213,"score":202,"percentile":214},"2026-05-04",0.21588,{"date":216,"score":202,"percentile":217},"2026-05-05",0.21577,{"date":219,"score":202,"percentile":220},"2026-05-06",0.21572,{"date":222,"score":202,"percentile":223},"2026-05-07",0.21645,{"date":225,"score":202,"percentile":226},"2026-05-08",0.2166,{"date":228,"score":202,"percentile":229},"2026-05-09",0.21728,{"date":231,"score":202,"percentile":232},"2026-05-10",0.21724,{"date":234,"score":202,"percentile":235},"2026-05-11",0.21703,{"date":237,"score":202,"percentile":238},"2026-05-12",0.21727,{"date":240,"score":202,"percentile":241},"2026-05-13",0.21771,{"date":243,"score":202,"percentile":244},"2026-05-14",0.21804,{"date":246,"score":202,"percentile":247},"2026-05-15",0.21824,{"date":249,"score":202,"percentile":250},"2026-05-16",0.21821,{"date":252,"score":202,"percentile":253},"2026-05-17",0.21778,{"date":255,"score":202,"percentile":256},"2026-05-18",0.21737,{"date":258,"score":202,"percentile":259},"2026-05-19",0.21725,{"date":261,"score":202,"percentile":238},"2026-05-20",{"date":263,"score":202,"percentile":264},"2026-05-21",0.21719,{"date":266,"score":202,"percentile":267},"2026-05-22",0.218,{"date":269,"score":202,"percentile":270},"2026-05-23",0.21802,{"date":272,"score":202,"percentile":273},"2026-05-24",0.21776,{"date":275,"score":202,"percentile":276},"2026-05-25",0.21743,{"date":278,"score":279,"percentile":280},"2026-05-26",0.00078,0.23075,{"date":282,"score":279,"percentile":283},"2026-05-27",0.23153,{"date":285,"score":279,"percentile":286},"2026-05-28",0.23274,{"date":288,"score":279,"percentile":289},"2026-05-29",0.23312,{"date":291,"score":279,"percentile":292},"2026-05-30",0.23313,{"date":294,"score":279,"percentile":295},"2026-05-31",0.23315,{"date":297,"score":279,"percentile":298},"2026-06-01",0.23298,{"date":300,"score":301,"percentile":302},"2026-06-02",0.00102,0.27623,{"date":304,"score":301,"percentile":305},"2026-06-03",0.27606,{"date":307,"score":301,"percentile":308},"2026-06-04",0.27533,{"date":310,"score":301,"percentile":311},"2026-06-05",0.27599,{"date":313,"score":301,"percentile":314},"2026-06-06",0.27548,{"date":316,"score":301,"percentile":317},"2026-06-07",0.2751,{"date":319,"score":301,"percentile":320},"2026-06-08",0.27461,{"date":322,"score":301,"percentile":323},"2026-06-09",0.27467,{"date":325,"score":301,"percentile":326},"2026-06-10",0.27488,{"date":328,"score":301,"percentile":329},"2026-06-11",0.27496,{"date":331,"score":301,"percentile":332},"2026-06-12",0.27698,{"date":334,"score":301,"percentile":335},"2026-06-13",0.27723,{"date":337,"score":301,"percentile":338},"2026-06-14",0.27713,{"date":340,"score":341,"percentile":342},"2026-06-15",0.00576,0.42727,{"date":344,"score":341,"percentile":345},"2026-06-16",0.42783,{"date":347,"score":341,"percentile":348},"2026-06-17",0.42865,{"date":350,"score":341,"percentile":351},"2026-06-18",0.4291,{"date":353,"score":341,"percentile":354},"2026-06-19",0.42896,{"date":356,"score":341,"percentile":357},"2026-06-20",0.42891,{"date":359,"score":341,"percentile":360},"2026-06-21",0.42876,{"date":362,"score":341,"percentile":363},"2026-06-22",0.42869,{"date":365,"score":341,"percentile":366},"2026-06-23",0.4295,{"date":368,"score":341,"percentile":369},"2026-06-24",0.42992,{"date":371,"score":341,"percentile":372},"2026-06-25",0.4307,{"date":374,"score":341,"percentile":375},"2026-06-26",0.4311,{"date":377,"score":341,"percentile":378},"2026-06-27",0.43151,{"date":380,"score":341,"percentile":381},"2026-06-28",0.43144,{"date":383,"score":341,"percentile":384},"2026-06-29",0.43149,{"date":386,"score":92,"percentile":387},"2026-06-30",0.22814,{"date":389,"score":92,"percentile":390},"2026-07-01",0.22922,{"date":392,"score":92,"percentile":393},"2026-07-02",0.22936,{"date":395,"score":92,"percentile":396},"2026-07-03",0.22935,{"date":398,"score":92,"percentile":399},"2026-07-04",0.22948,{"date":180,"score":92,"percentile":181},[402,406],{"source":96,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":403,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":404,"vectorString":97,"impactScore":94,"exploitabilityScore":405},"CRITICAL",10,{"source":102,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":407,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":404,"vectorString":97,"impactScore":94,"exploitabilityScore":405},[409,485],{"ecosystem":9,"name":410,"vendor":411,"product":411,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":413},"Linux","linux","a",[414,421,424,427,430,434,437,440,443,445,447,449,451,454,456,458,460,462,464,468,472,476,480,484],{"version":415,"is_range":416,"range_type":96,"version_start":417,"version_start_type":418,"version_end":419,"version_end_type":420,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 8d155e2d1c4102f74f82a2bf9c016164bb0f7384",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","8d155e2d1c4102f74f82a2bf9c016164bb0f7384","excluding",{"version":422,"is_range":416,"range_type":96,"version_start":417,"version_start_type":418,"version_end":423,"version_end_type":420,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 906f16a836de13fe61f49cdce2f66f2dbd14caf4","906f16a836de13fe61f49cdce2f66f2dbd14caf4",{"version":425,"is_range":416,"range_type":96,"version_start":417,"version_start_type":418,"version_end":426,"version_end_type":420,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C ef8ebb1c637b4cfb61a9dd2e013376774ee2033b","ef8ebb1c637b4cfb61a9dd2e013376774ee2033b",{"version":428,"is_range":416,"range_type":96,"version_start":417,"version_start_type":418,"version_end":429,"version_end_type":420,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 5e1c4ece08ccdc197177631f111845a2c68eede3","5e1c4ece08ccdc197177631f111845a2c68eede3",{"version":431,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":433,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 324262c38438255bf6bdbf6342ca47c0badaab76","1325f85fa49f57df034869de430f7c302ae23109","324262c38438255bf6bdbf6342ca47c0badaab76",{"version":435,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":436,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 973f2c250289f5bf6cc146b98aa6fdde11fe50d6","973f2c250289f5bf6cc146b98aa6fdde11fe50d6",{"version":438,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":439,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C ce744264b06b97069b3722511ab355738311fee0","ce744264b06b97069b3722511ab355738311fee0",{"version":441,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":442,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 885c8591784da6314f9aa82fa460ac69f9f79e5f","885c8591784da6314f9aa82fa460ac69f9f79e5f",{"version":444,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":419,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 8d155e2d1c4102f74f82a2bf9c016164bb0f7384",{"version":446,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":423,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 906f16a836de13fe61f49cdce2f66f2dbd14caf4",{"version":448,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":426,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C ef8ebb1c637b4cfb61a9dd2e013376774ee2033b",{"version":450,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":429,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 5e1c4ece08ccdc197177631f111845a2c68eede3",{"version":452,"is_range":416,"range_type":96,"version_start":432,"version_start_type":418,"version_end":453,"version_end_type":420,"fixed_in":9},">= 1325f85fa49f57df034869de430f7c302ae23109, \u003C 2ab833a16a825373aad2ba7d54b572b277e95b71","2ab833a16a825373aad2ba7d54b572b277e95b71",{"version":455,"is_range":90,"range_type":96,"version_start":455,"version_start_type":418,"version_end":455,"version_end_type":418,"fixed_in":9},"d9638d9236eed035a575feddec61d036dacc2676",{"version":457,"is_range":90,"range_type":96,"version_start":457,"version_start_type":418,"version_end":457,"version_end_type":418,"fixed_in":9},"ca7d3501b7a287c18b5b470e871d3029b0f4842a",{"version":459,"is_range":90,"range_type":96,"version_start":459,"version_start_type":418,"version_end":459,"version_end_type":418,"fixed_in":9},"1ce528277e1a66856ed3f7526c1e3458c0ed4a70",{"version":461,"is_range":90,"range_type":96,"version_start":461,"version_start_type":418,"version_end":461,"version_end_type":418,"fixed_in":9},"db898d0c5c493ce4177d5e1d3a953e079a56a24b",{"version":463,"is_range":90,"range_type":96,"version_start":463,"version_start_type":418,"version_end":463,"version_end_type":418,"fixed_in":9},"5aa02704b9ee67c5b2ee26d54c5f4eb99e93ba9a",{"version":465,"is_range":416,"range_type":96,"version_start":466,"version_start_type":418,"version_end":467,"version_end_type":420,"fixed_in":9},">= 2.6.32.37, \u003C 2.6.33","2.6.32.37","2.6.33",{"version":469,"is_range":416,"range_type":96,"version_start":470,"version_start_type":418,"version_end":471,"version_end_type":420,"fixed_in":9},">= 2.6.33.10, \u003C 2.6.34","2.6.33.10","2.6.34",{"version":473,"is_range":416,"range_type":96,"version_start":474,"version_start_type":418,"version_end":475,"version_end_type":420,"fixed_in":9},">= 2.6.34.11, \u003C 2.6.35","2.6.34.11","2.6.35",{"version":477,"is_range":416,"range_type":96,"version_start":478,"version_start_type":418,"version_end":479,"version_end_type":420,"fixed_in":9},">= 2.6.35.13, \u003C 2.6.36","2.6.35.13","2.6.36",{"version":481,"is_range":416,"range_type":96,"version_start":482,"version_start_type":418,"version_end":483,"version_end_type":420,"fixed_in":9},">= 2.6.38.3, \u003C 2.6.39","2.6.38.3","2.6.39",{"version":483,"is_range":90,"range_type":96,"version_start":483,"version_start_type":418,"version_end":483,"version_end_type":418,"fixed_in":9},{"ecosystem":9,"name":486,"vendor":411,"product":487,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":488},"Linux Kernel","linux kernel",[489,493,497,501,505],{"version":490,"is_range":416,"range_type":491,"version_start":483,"version_start_type":418,"version_end":492,"version_end_type":420,"fixed_in":9},"gte2.6.39_lt6.6.136","cpe","6.6.136",{"version":494,"is_range":416,"range_type":491,"version_start":495,"version_start_type":418,"version_end":496,"version_end_type":420,"fixed_in":9},"gte6.7_lt6.12.83","6.7","6.12.83",{"version":498,"is_range":416,"range_type":491,"version_start":499,"version_start_type":418,"version_end":500,"version_end_type":420,"fixed_in":9},"gte6.13_lt6.18.24","6.13","6.18.24",{"version":502,"is_range":416,"range_type":491,"version_start":503,"version_start_type":418,"version_end":504,"version_end_type":420,"fixed_in":9},"gte6.19_lt6.19.14","6.19","6.19.14",{"version":506,"is_range":416,"range_type":491,"version_start":507,"version_start_type":418,"version_end":508,"version_end_type":420,"fixed_in":9},"gte7.0_lt7.0.1","7.0","7.0.1"]