[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31636":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":33,"related":34,"reserved_at":9,"published_at":35,"modified_at":36,"state":37,"summary":38,"references_raw":47,"kevs":62,"epss":63,"epss_history":66,"metrics":282,"affected":290},"CVE-2026-31636","In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: fix RESPONSE authenticator parser OOB read\n\nrxgk_verify_authenticator() copies auth_len bytes into a temporary\nbuffer and then passes p + auth_len as the parser limit to\nrxgk_do_verify_authenticator(). Since p is a __be32 *, that inflates the\nparser end pointer by a factor of four and lets malformed RESPONSE\nauthenticators read past the kmalloc() buffer.\n\nDecoded from the original latest-net reproduction logs with\nscripts/decode_stacktrace.sh:\n\nBUG: KASAN: slab-out-of-bounds in rxgk_verify_response()\nCall Trace:\n dump_stack_lvl() [lib/dump_stack.c:123]\n print_report() [mm/kasan/report.c:379 mm/kasan/report.c:482]\n kasan_report() [mm/kasan/report.c:597]\n rxgk_verify_response()\n   [net/rxrpc/rxgk.c:1103 net/rxrpc/rxgk.c:1167\n    net/rxrpc/rxgk.c:1274]\n rxrpc_process_connection()\n   [net/rxrpc/conn_event.c:266 net/rxrpc/conn_event.c:364\n    net/rxrpc/conn_event.c:386]\n process_one_work() [kernel/workqueue.c:3281]\n worker_thread()\n   [kernel/workqueue.c:3353 kernel/workqueue.c:3440]\n kthread() [kernel/kthread.c:436]\n ret_from_fork() [arch/x86/kernel/process.c:164]\n\nAllocated by task 54:\n rxgk_verify_response()\n   [include/linux/slab.h:954 net/rxrpc/rxgk.c:1155\n    net/rxrpc/rxgk.c:1274]\n rxrpc_process_connection()\n   [net/rxrpc/conn_event.c:266 net/rxrpc/conn_event.c:364\n    net/rxrpc/conn_event.c:386]\n\nConvert the byte count to __be32 units before constructing the parser\nlimit.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31],{"_key":28},"DEBIAN-CVE-2026-31636",{"_key":30},"RHSA-2026:30129",{"_key":32},"UBUNTU-CVE-2026-31636",[],[],"2026-04-24T14:44:50.637Z","2026-05-11T22:12:38.719Z","Analyzed",{"cisa_kev":39,"cisa_ransomware":39,"cisa_vendor":9,"epss_severity":40,"epss_score":41,"severity":42,"severity_score":43,"severity_version":44,"severity_source":45,"severity_vector":46,"severity_status":37},false,"low",0.00442,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",[48,54,58],{"url":49,"sources":50,"tags":52},"https://git.kernel.org/stable/c/7875f3d9777bd4e9892c4db830571ab8ac2044c0",[45,51],"nvd",[53],"Patch",{"url":55,"sources":56,"tags":57},"https://git.kernel.org/stable/c/20a188775a9a9982d1987e12660d9b44b40a6c99",[45,51],[53],{"url":59,"sources":60,"tags":61},"https://git.kernel.org/stable/c/3e3138007887504ee9206d0bfb5acb062c600025",[45,51],[53],[],{"date":64,"score":41,"percentile":65},"2026-07-05",0.35502,[67,71,74,77,81,84,88,91,94,97,100,103,106,109,112,115,118,121,123,126,129,131,134,137,140,143,146,149,152,155,158,161,165,168,171,174,177,180,183,186,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281],{"date":68,"score":69,"percentile":70},"2026-04-25",0.00017,0.04073,{"date":72,"score":69,"percentile":73},"2026-04-26",0.0407,{"date":75,"score":69,"percentile":76},"2026-04-27",0.04059,{"date":78,"score":79,"percentile":80},"2026-04-28",0.0004,0.12158,{"date":82,"score":79,"percentile":83},"2026-04-29",0.12133,{"date":85,"score":86,"percentile":87},"2026-04-30",0.00053,0.16435,{"date":89,"score":86,"percentile":90},"2026-05-01",0.16418,{"date":92,"score":86,"percentile":93},"2026-05-02",0.16448,{"date":95,"score":86,"percentile":96},"2026-05-03",0.16419,{"date":98,"score":86,"percentile":99},"2026-05-04",0.16352,{"date":101,"score":86,"percentile":102},"2026-05-05",0.16334,{"date":104,"score":86,"percentile":105},"2026-05-06",0.16328,{"date":107,"score":86,"percentile":108},"2026-05-07",0.16451,{"date":110,"score":86,"percentile":111},"2026-05-08",0.16487,{"date":113,"score":86,"percentile":114},"2026-05-09",0.16557,{"date":116,"score":86,"percentile":117},"2026-05-10",0.16542,{"date":119,"score":86,"percentile":120},"2026-05-11",0.16522,{"date":122,"score":86,"percentile":114},"2026-05-12",{"date":124,"score":86,"percentile":125},"2026-05-13",0.16583,{"date":127,"score":86,"percentile":128},"2026-05-14",0.16627,{"date":130,"score":86,"percentile":128},"2026-05-15",{"date":132,"score":86,"percentile":133},"2026-05-16",0.16639,{"date":135,"score":86,"percentile":136},"2026-05-17",0.16617,{"date":138,"score":86,"percentile":139},"2026-05-18",0.16569,{"date":141,"score":86,"percentile":142},"2026-05-19",0.16547,{"date":144,"score":86,"percentile":145},"2026-05-20",0.16558,{"date":147,"score":86,"percentile":148},"2026-05-21",0.16548,{"date":150,"score":86,"percentile":151},"2026-05-22",0.16698,{"date":153,"score":86,"percentile":154},"2026-05-23",0.16684,{"date":156,"score":86,"percentile":157},"2026-05-24",0.16653,{"date":159,"score":86,"percentile":160},"2026-05-25",0.16634,{"date":162,"score":163,"percentile":164},"2026-05-26",0.00058,0.18041,{"date":166,"score":163,"percentile":167},"2026-05-27",0.18134,{"date":169,"score":163,"percentile":170},"2026-05-28",0.18278,{"date":172,"score":163,"percentile":173},"2026-05-29",0.18341,{"date":175,"score":163,"percentile":176},"2026-05-30",0.18335,{"date":178,"score":163,"percentile":179},"2026-05-31",0.18327,{"date":181,"score":163,"percentile":182},"2026-06-01",0.18313,{"date":184,"score":163,"percentile":185},"2026-06-02",0.18317,{"date":187,"score":163,"percentile":185},"2026-06-03",{"date":189,"score":163,"percentile":190},"2026-06-04",0.18332,{"date":192,"score":163,"percentile":193},"2026-06-05",0.18409,{"date":195,"score":163,"percentile":196},"2026-06-06",0.18411,{"date":198,"score":163,"percentile":199},"2026-06-07",0.18374,{"date":201,"score":163,"percentile":202},"2026-06-08",0.18302,{"date":204,"score":163,"percentile":205},"2026-06-09",0.18323,{"date":207,"score":163,"percentile":208},"2026-06-10",0.18368,{"date":210,"score":163,"percentile":211},"2026-06-11",0.18404,{"date":213,"score":163,"percentile":214},"2026-06-12",0.18568,{"date":216,"score":163,"percentile":217},"2026-06-13",0.18586,{"date":219,"score":163,"percentile":220},"2026-06-14",0.18564,{"date":222,"score":41,"percentile":223},"2026-06-15",0.34995,{"date":225,"score":41,"percentile":226},"2026-06-16",0.3505,{"date":228,"score":41,"percentile":229},"2026-06-17",0.35083,{"date":231,"score":41,"percentile":232},"2026-06-18",0.35152,{"date":234,"score":41,"percentile":235},"2026-06-19",0.35139,{"date":237,"score":41,"percentile":238},"2026-06-20",0.35132,{"date":240,"score":41,"percentile":241},"2026-06-21",0.35118,{"date":243,"score":41,"percentile":244},"2026-06-22",0.35106,{"date":246,"score":41,"percentile":247},"2026-06-23",0.35182,{"date":249,"score":41,"percentile":250},"2026-06-24",0.35219,{"date":252,"score":41,"percentile":253},"2026-06-25",0.35292,{"date":255,"score":41,"percentile":256},"2026-06-26",0.35333,{"date":258,"score":41,"percentile":259},"2026-06-27",0.35371,{"date":261,"score":41,"percentile":262},"2026-06-28",0.35346,{"date":264,"score":41,"percentile":265},"2026-06-29",0.35347,{"date":267,"score":41,"percentile":268},"2026-06-30",0.35323,{"date":270,"score":41,"percentile":271},"2026-07-01",0.35424,{"date":273,"score":41,"percentile":274},"2026-07-02",0.35454,{"date":276,"score":41,"percentile":277},"2026-07-03",0.35472,{"date":279,"score":41,"percentile":280},"2026-07-04",0.35487,{"date":64,"score":41,"percentile":65},[283,288],{"source":45,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":284,"cvss_v4_0":9},{"baseScore":43,"baseSeverity":285,"vectorString":46,"impactScore":286,"exploitabilityScore":287},"CRITICAL",8.7,10,{"source":51,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":289,"cvss_v4_0":9},{"baseScore":43,"baseSeverity":285,"vectorString":46,"impactScore":286,"exploitabilityScore":287},[291,311],{"ecosystem":9,"name":292,"vendor":293,"product":293,"cpe_part":294,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":295},"Linux","linux","a",[296,303,306,309],{"version":297,"is_range":298,"range_type":45,"version_start":299,"version_start_type":300,"version_end":301,"version_end_type":302,"fixed_in":9},">= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, \u003C 7875f3d9777bd4e9892c4db830571ab8ac2044c0",true,"9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a","including","7875f3d9777bd4e9892c4db830571ab8ac2044c0","excluding",{"version":304,"is_range":298,"range_type":45,"version_start":299,"version_start_type":300,"version_end":305,"version_end_type":302,"fixed_in":9},">= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, \u003C 20a188775a9a9982d1987e12660d9b44b40a6c99","20a188775a9a9982d1987e12660d9b44b40a6c99",{"version":307,"is_range":298,"range_type":45,"version_start":299,"version_start_type":300,"version_end":308,"version_end_type":302,"fixed_in":9},">= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, \u003C 3e3138007887504ee9206d0bfb5acb062c600025","3e3138007887504ee9206d0bfb5acb062c600025",{"version":310,"is_range":39,"range_type":45,"version_start":310,"version_start_type":300,"version_end":310,"version_end_type":300,"fixed_in":9},"6.16",{"ecosystem":9,"name":312,"vendor":293,"product":313,"cpe_part":294,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":314},"Linux Kernel","linux kernel",[315,320,324,325,327,329,331,333,335,337],{"version":316,"is_range":298,"range_type":317,"version_start":318,"version_start_type":300,"version_end":319,"version_end_type":302,"fixed_in":9},"gte6.16.1_lt6.18.23","cpe","6.16.1","6.18.23",{"version":321,"is_range":298,"range_type":317,"version_start":322,"version_start_type":300,"version_end":323,"version_end_type":302,"fixed_in":9},"gte6.19_lt6.19.13","6.19","6.19.13",{"version":310,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":326,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":328,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":330,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":332,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":334,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":336,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":338,"is_range":39,"range_type":317,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]