[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31641":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":34,"aliases":35,"duplicate_of":9,"upstream":36,"downstream":37,"duplicates":44,"related":45,"reserved_at":9,"published_at":46,"modified_at":47,"state":48,"summary":49,"references_raw":58,"kevs":94,"epss":95,"epss_history":98,"metrics":313,"affected":321},"CVE-2026-31641","In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix RxGK token loading to check bounds\n\nrxrpc_preparse_xdr_yfs_rxgk() reads the raw key length and ticket length\nfrom the XDR token as u32 values and passes each through round_up(x, 4)\nbefore using the rounded value for validation and allocation.  When the raw\nlength is >= 0xfffffffd, round_up() wraps to 0, so the bounds check and\nkzalloc both use 0 while the subsequent memcpy still copies the original\n~4 GiB value, producing a heap buffer overflow reachable from an\nunprivileged add_key() call.\n\nFix this by:\n\n (1) Rejecting raw key lengths above AFSTOKEN_GK_KEY_MAX and raw ticket\n     lengths above AFSTOKEN_GK_TOKEN_MAX before rounding, consistent with\n     the caps that the RxKAD path already enforces via AFSTOKEN_RK_TIX_MAX.\n\n (2) Sizing the flexible-array allocation from the validated raw key\n     length via struct_size_t() instead of the rounded value.\n\n (3) Caching the raw lengths so that the later field assignments and\n     memcpy calls do not re-read from the token, eliminating a class of\n     TOCTOU re-parse.\n\nThe control path (valid token with lengths within bounds) is unaffected.",null,[11,23],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],{"_key":24,"id":24,"name":25,"description":26,"type":15,"status":27,"abstraction":17,"likelihood_of_exploit":28,"capec":29},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","Stable","Medium",[30],{"id":31,"name":32,"techniques":33},"CAPEC-92","Forced Integer Overflow",[],[],[],[],[38,40,42],{"_key":39},"DEBIAN-CVE-2026-31641",{"_key":41},"RHSA-2026:27288",{"_key":43},"UBUNTU-CVE-2026-31641",[],[],"2026-04-24T14:44:56.204Z","2026-07-15T01:09:05.157Z","Analyzed",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":48},false,"low",0.00143,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[59,65,69,73,79,84,89],{"url":60,"sources":61,"tags":63},"https://git.kernel.org/stable/c/3e04596cba8a86cbff9c3f4bf0a524a3a488773c",[56,62],"nvd",[64],"Patch",{"url":66,"sources":67,"tags":68},"https://git.kernel.org/stable/c/49875b360c2b83a3c226e189c502e501d83e6445",[56,62],[64],{"url":70,"sources":71,"tags":72},"https://git.kernel.org/stable/c/d179a868dd755b0cfcf7582e00943d702b9943b8",[56,62],[64],{"url":74,"sources":75,"tags":76},"https://access.redhat.com/security/cve/CVE-2026-31641",[56],[77,78],"VDB Entry","X Refsource REDHAT",{"url":80,"sources":81,"tags":82},"https://bugzilla.redhat.com/show_bug.cgi?id=2461548",[56],[83,78],"Issue Tracking",{"url":85,"sources":86,"tags":87},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31641.json",[56],[88],"X Sadp Csaf Vex",{"url":90,"sources":91,"tags":92},"https://access.redhat.com/errata/RHSA-2026:27288",[56],[93,78],"Vendor Advisory",[],{"date":96,"score":52,"percentile":97},"2026-07-05",0.03918,[99,103,106,109,113,116,120,123,126,128,131,134,137,140,143,146,149,152,155,157,160,163,166,169,172,175,177,180,183,186,189,192,196,199,202,205,208,211,214,217,220,223,225,228,231,234,237,240,243,246,249,252,256,259,262,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312],{"date":100,"score":101,"percentile":102},"2026-04-25",0.00017,0.04073,{"date":104,"score":101,"percentile":105},"2026-04-26",0.0407,{"date":107,"score":101,"percentile":108},"2026-04-27",0.04059,{"date":110,"score":111,"percentile":112},"2026-04-28",0.00012,0.01678,{"date":114,"score":111,"percentile":115},"2026-04-29",0.01688,{"date":117,"score":118,"percentile":119},"2026-04-30",0.00013,0.022,{"date":121,"score":118,"percentile":122},"2026-05-01",0.02195,{"date":124,"score":118,"percentile":125},"2026-05-02",0.02181,{"date":127,"score":118,"percentile":125},"2026-05-03",{"date":129,"score":118,"percentile":130},"2026-05-04",0.02178,{"date":132,"score":118,"percentile":133},"2026-05-05",0.02174,{"date":135,"score":118,"percentile":136},"2026-05-06",0.02164,{"date":138,"score":118,"percentile":139},"2026-05-07",0.02177,{"date":141,"score":118,"percentile":142},"2026-05-08",0.02183,{"date":144,"score":118,"percentile":145},"2026-05-09",0.02206,{"date":147,"score":118,"percentile":148},"2026-05-10",0.02203,{"date":150,"score":118,"percentile":151},"2026-05-11",0.02205,{"date":153,"score":118,"percentile":154},"2026-05-12",0.02191,{"date":156,"score":118,"percentile":148},"2026-05-13",{"date":158,"score":118,"percentile":159},"2026-05-14",0.02209,{"date":161,"score":118,"percentile":162},"2026-05-15",0.02213,{"date":164,"score":118,"percentile":165},"2026-05-16",0.02222,{"date":167,"score":118,"percentile":168},"2026-05-17",0.02218,{"date":170,"score":118,"percentile":171},"2026-05-18",0.02201,{"date":173,"score":118,"percentile":174},"2026-05-19",0.02188,{"date":176,"score":118,"percentile":125},"2026-05-20",{"date":178,"score":118,"percentile":179},"2026-05-21",0.02168,{"date":181,"score":118,"percentile":182},"2026-05-22",0.0231,{"date":184,"score":118,"percentile":185},"2026-05-23",0.02304,{"date":187,"score":118,"percentile":188},"2026-05-24",0.02287,{"date":190,"score":118,"percentile":191},"2026-05-25",0.02274,{"date":193,"score":194,"percentile":195},"2026-05-26",0.00015,0.03377,{"date":197,"score":194,"percentile":198},"2026-05-27",0.03397,{"date":200,"score":194,"percentile":201},"2026-05-28",0.03374,{"date":203,"score":194,"percentile":204},"2026-05-29",0.03379,{"date":206,"score":194,"percentile":207},"2026-05-30",0.03407,{"date":209,"score":194,"percentile":210},"2026-05-31",0.03395,{"date":212,"score":194,"percentile":213},"2026-06-01",0.03347,{"date":215,"score":194,"percentile":216},"2026-06-02",0.03319,{"date":218,"score":194,"percentile":219},"2026-06-03",0.0331,{"date":221,"score":194,"percentile":222},"2026-06-04",0.03309,{"date":224,"score":194,"percentile":216},"2026-06-05",{"date":226,"score":194,"percentile":227},"2026-06-06",0.03329,{"date":229,"score":194,"percentile":230},"2026-06-07",0.03295,{"date":232,"score":194,"percentile":233},"2026-06-08",0.03277,{"date":235,"score":194,"percentile":236},"2026-06-09",0.03264,{"date":238,"score":194,"percentile":239},"2026-06-10",0.03263,{"date":241,"score":194,"percentile":242},"2026-06-11",0.03283,{"date":244,"score":194,"percentile":245},"2026-06-12",0.03297,{"date":247,"score":194,"percentile":248},"2026-06-13",0.03284,{"date":250,"score":194,"percentile":251},"2026-06-14",0.03298,{"date":253,"score":254,"percentile":255},"2026-06-15",0.0014,0.03693,{"date":257,"score":254,"percentile":258},"2026-06-16",0.03703,{"date":260,"score":254,"percentile":261},"2026-06-17",0.03719,{"date":263,"score":254,"percentile":261},"2026-06-18",{"date":265,"score":254,"percentile":266},"2026-06-19",0.03715,{"date":268,"score":254,"percentile":269},"2026-06-20",0.03712,{"date":271,"score":254,"percentile":272},"2026-06-21",0.0371,{"date":274,"score":254,"percentile":275},"2026-06-22",0.03707,{"date":277,"score":254,"percentile":278},"2026-06-23",0.03725,{"date":280,"score":254,"percentile":281},"2026-06-24",0.0373,{"date":283,"score":254,"percentile":284},"2026-06-25",0.03744,{"date":286,"score":254,"percentile":287},"2026-06-26",0.0376,{"date":289,"score":254,"percentile":290},"2026-06-27",0.03762,{"date":292,"score":254,"percentile":293},"2026-06-28",0.03783,{"date":295,"score":254,"percentile":296},"2026-06-29",0.0378,{"date":298,"score":52,"percentile":299},"2026-06-30",0.03922,{"date":301,"score":52,"percentile":302},"2026-07-01",0.03928,{"date":304,"score":52,"percentile":305},"2026-07-02",0.03921,{"date":307,"score":52,"percentile":308},"2026-07-03",0.03915,{"date":310,"score":52,"percentile":311},"2026-07-04",0.03919,{"date":96,"score":52,"percentile":97},[314,319],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":315,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":316,"vectorString":57,"impactScore":317,"exploitabilityScore":318},"HIGH",9.8,4.6,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":320,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":316,"vectorString":57,"impactScore":317,"exploitabilityScore":318},[322,342],{"ecosystem":9,"name":323,"vendor":324,"product":324,"cpe_part":325,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":326},"Linux","linux","a",[327,334,337,340],{"version":328,"is_range":329,"range_type":56,"version_start":330,"version_start_type":331,"version_end":332,"version_end_type":333,"fixed_in":9},">= 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6, \u003C 3e04596cba8a86cbff9c3f4bf0a524a3a488773c",true,"0ca100ff4df64f5d0f6c1dd5080c3e096786bea6","including","3e04596cba8a86cbff9c3f4bf0a524a3a488773c","excluding",{"version":335,"is_range":329,"range_type":56,"version_start":330,"version_start_type":331,"version_end":336,"version_end_type":333,"fixed_in":9},">= 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6, \u003C 49875b360c2b83a3c226e189c502e501d83e6445","49875b360c2b83a3c226e189c502e501d83e6445",{"version":338,"is_range":329,"range_type":56,"version_start":330,"version_start_type":331,"version_end":339,"version_end_type":333,"fixed_in":9},">= 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6, \u003C d179a868dd755b0cfcf7582e00943d702b9943b8","d179a868dd755b0cfcf7582e00943d702b9943b8",{"version":341,"is_range":50,"range_type":56,"version_start":341,"version_start_type":331,"version_end":341,"version_end_type":331,"fixed_in":9},"6.16",{"ecosystem":9,"name":343,"vendor":324,"product":344,"cpe_part":325,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":345},"Linux Kernel","linux kernel",[346,351,355,356,358,360,362,364,366,368],{"version":347,"is_range":329,"range_type":348,"version_start":349,"version_start_type":331,"version_end":350,"version_end_type":333,"fixed_in":9},"gte6.16.1_lt6.18.23","cpe","6.16.1","6.18.23",{"version":352,"is_range":329,"range_type":348,"version_start":353,"version_start_type":331,"version_end":354,"version_end_type":333,"fixed_in":9},"gte6.19_lt6.19.13","6.19","6.19.13",{"version":341,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":357,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":359,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":361,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":363,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":365,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":367,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":369,"is_range":50,"range_type":348,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]