[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31669":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":72,"related":73,"reserved_at":9,"published_at":77,"modified_at":78,"state":79,"summary":80,"references_raw":89,"kevs":128,"epss":129,"epss_history":132,"metrics":345,"affected":352},"CVE-2026-31669","In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix slab-use-after-free in __inet_lookup_established\n\nThe ehash table lookups are lockless and rely on\nSLAB_TYPESAFE_BY_RCU to guarantee socket memory stability\nduring RCU read-side critical sections. Both tcp_prot and\ntcpv6_prot have their slab caches created with this flag\nvia proto_register().\n\nHowever, MPTCP's mptcp_subflow_init() copies tcpv6_prot into\ntcpv6_prot_override during inet_init() (fs_initcall, level 5),\nbefore inet6_init() (module_init/device_initcall, level 6) has\ncalled proto_register(&tcpv6_prot). At that point,\ntcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab\nremains NULL permanently.\n\nThis causes MPTCP v6 subflow child sockets to be allocated via\nkmalloc (falling into kmalloc-4k) instead of the TCPv6 slab\ncache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so\nwhen these sockets are freed without SOCK_RCU_FREE (which is\ncleared for child sockets by design), the memory can be\nimmediately reused. Concurrent ehash lookups under\nrcu_read_lock can then access freed memory, triggering a\nslab-use-after-free in __inet_lookup_established.\n\nFix this by splitting the IPv6-specific initialization out of\nmptcp_subflow_init() into a new mptcp_subflow_v6_init(), called\nfrom mptcp_proto_v6_init() before protocol registration. This\nensures tcpv6_prot_override.slab correctly inherits the\nSLAB_TYPESAFE_BY_RCU slab cache.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70],{"_key":25},"MGASA-2026-0108",{"_key":27},"MGASA-2026-0110",{"_key":29},"DEBIAN-CVE-2026-31669",{"_key":31},"SUSE-SU-2026:21834-1",{"_key":33},"SUSE-SU-2026:2195-1",{"_key":35},"SUSE-SU-2026:2238-1",{"_key":37},"USN-8490-2",{"_key":39},"USN-8492-4",{"_key":41},"RHSA-2026:26427",{"_key":43},"RHSA-2026:26428",{"_key":45},"RHSA-2026:27288",{"_key":47},"RHSA-2026:27713",{"_key":49},"RHSA-2026:27789",{"_key":51},"RHSA-2026:33215",{"_key":53},"RHSA-2026:33900",{"_key":55},"RHSA-2026:34094",{"_key":57},"RHSA-2026:34095",{"_key":59},"RHSA-2026:35863",{"_key":61},"RHSA-2026:35894",{"_key":63},"RHSA-2026:35896",{"_key":65},"UBUNTU-CVE-2026-31669",{"_key":67},"USN-8492-5",{"_key":69},"USN-8527-1",{"_key":71},"USN-8528-1",[],[74,75,76],{"_key":31},{"_key":33},{"_key":35},"2026-04-24T14:45:17.295Z","2026-07-14T12:48:35.156Z","Analyzed",{"cisa_kev":81,"cisa_ransomware":81,"cisa_vendor":9,"epss_severity":82,"epss_score":83,"severity":84,"severity_score":85,"severity_version":86,"severity_source":87,"severity_vector":88,"severity_status":79},false,"low",0.004,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[90,96,100,104,108,112,116,120,124],{"url":91,"sources":92,"tags":94},"https://git.kernel.org/stable/c/f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47",[87,93],"nvd",[95],"Patch",{"url":97,"sources":98,"tags":99},"https://git.kernel.org/stable/c/fb1f54b7d16f393b8b65d328410f78b4beea8fcc",[87,93],[95],{"url":101,"sources":102,"tags":103},"https://git.kernel.org/stable/c/3fd6547f5b8ac99687be6d937a0321efda760597",[87,93],[95],{"url":105,"sources":106,"tags":107},"https://git.kernel.org/stable/c/eb9c6aeb512f877cf397deb1e4526f646c70e4a7",[87,93],[95],{"url":109,"sources":110,"tags":111},"https://git.kernel.org/stable/c/15fa9ead4d5e6b6b9c794e84144146c917f2cb62",[87,93],[95],{"url":113,"sources":114,"tags":115},"https://git.kernel.org/stable/c/b313e9037d98c13938740e5ebda7852929366dff",[87,93],[95],{"url":117,"sources":118,"tags":119},"https://git.kernel.org/stable/c/9b55b253907e7431210483519c5ad711a37dafa1",[87,93],[95],{"url":121,"sources":122,"tags":123},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[87],[],{"url":125,"sources":126,"tags":127},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[87],[],[],{"date":130,"score":83,"percentile":131},"2026-07-05",0.32041,[133,137,140,143,147,150,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,210,213,216,219,222,224,227,231,234,237,240,242,244,247,250,253,256,259,262,265,267,270,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344],{"date":134,"score":135,"percentile":136},"2026-04-25",0.0003,0.08643,{"date":138,"score":135,"percentile":139},"2026-04-26",0.08624,{"date":141,"score":135,"percentile":142},"2026-04-27",0.08612,{"date":144,"score":145,"percentile":146},"2026-04-28",0.00068,0.20631,{"date":148,"score":145,"percentile":149},"2026-04-29",0.20644,{"date":151,"score":152,"percentile":153},"2026-04-30",0.00089,0.25122,{"date":155,"score":152,"percentile":156},"2026-05-01",0.25131,{"date":158,"score":152,"percentile":159},"2026-05-02",0.25169,{"date":161,"score":152,"percentile":162},"2026-05-03",0.25119,{"date":164,"score":152,"percentile":165},"2026-05-04",0.25068,{"date":167,"score":152,"percentile":168},"2026-05-05",0.25027,{"date":170,"score":152,"percentile":171},"2026-05-06",0.25021,{"date":173,"score":152,"percentile":174},"2026-05-07",0.25091,{"date":176,"score":152,"percentile":177},"2026-05-08",0.251,{"date":179,"score":152,"percentile":180},"2026-05-09",0.25151,{"date":182,"score":152,"percentile":183},"2026-05-10",0.25124,{"date":185,"score":152,"percentile":186},"2026-05-11",0.2508,{"date":188,"score":152,"percentile":189},"2026-05-12",0.25098,{"date":191,"score":152,"percentile":192},"2026-05-13",0.25146,{"date":194,"score":152,"percentile":195},"2026-05-14",0.25174,{"date":197,"score":152,"percentile":198},"2026-05-15",0.25209,{"date":200,"score":152,"percentile":201},"2026-05-16",0.25205,{"date":203,"score":152,"percentile":204},"2026-05-17",0.25145,{"date":206,"score":152,"percentile":207},"2026-05-18",0.25083,{"date":209,"score":152,"percentile":186},"2026-05-19",{"date":211,"score":152,"percentile":212},"2026-05-20",0.25088,{"date":214,"score":152,"percentile":215},"2026-05-21",0.2509,{"date":217,"score":152,"percentile":218},"2026-05-22",0.2516,{"date":220,"score":152,"percentile":221},"2026-05-23",0.25155,{"date":223,"score":152,"percentile":183},"2026-05-24",{"date":225,"score":152,"percentile":226},"2026-05-25",0.25099,{"date":228,"score":229,"percentile":230},"2026-05-26",0.00097,0.26449,{"date":232,"score":229,"percentile":233},"2026-05-27",0.26515,{"date":235,"score":229,"percentile":236},"2026-05-28",0.26628,{"date":238,"score":229,"percentile":239},"2026-05-29",0.26683,{"date":241,"score":229,"percentile":239},"2026-05-30",{"date":243,"score":229,"percentile":239},"2026-05-31",{"date":245,"score":229,"percentile":246},"2026-06-01",0.26669,{"date":248,"score":229,"percentile":249},"2026-06-02",0.26682,{"date":251,"score":229,"percentile":252},"2026-06-03",0.26665,{"date":254,"score":229,"percentile":255},"2026-06-04",0.26654,{"date":257,"score":229,"percentile":258},"2026-06-05",0.26758,{"date":260,"score":229,"percentile":261},"2026-06-06",0.26749,{"date":263,"score":229,"percentile":264},"2026-06-07",0.26709,{"date":266,"score":229,"percentile":255},"2026-06-08",{"date":268,"score":229,"percentile":269},"2026-06-09",0.26664,{"date":271,"score":229,"percentile":239},"2026-06-10",{"date":273,"score":229,"percentile":274},"2026-06-11",0.26699,{"date":276,"score":229,"percentile":277},"2026-06-12",0.26902,{"date":279,"score":229,"percentile":280},"2026-06-13",0.26916,{"date":282,"score":229,"percentile":283},"2026-06-14",0.26899,{"date":285,"score":83,"percentile":286},"2026-06-15",0.31582,{"date":288,"score":83,"percentile":289},"2026-06-16",0.3163,{"date":291,"score":83,"percentile":292},"2026-06-17",0.31658,{"date":294,"score":83,"percentile":295},"2026-06-18",0.31711,{"date":297,"score":83,"percentile":298},"2026-06-19",0.31687,{"date":300,"score":83,"percentile":301},"2026-06-20",0.31675,{"date":303,"score":83,"percentile":304},"2026-06-21",0.31656,{"date":306,"score":83,"percentile":307},"2026-06-22",0.31643,{"date":309,"score":83,"percentile":310},"2026-06-23",0.3172,{"date":312,"score":83,"percentile":313},"2026-06-24",0.3175,{"date":315,"score":83,"percentile":316},"2026-06-25",0.31837,{"date":318,"score":83,"percentile":319},"2026-06-26",0.3188,{"date":321,"score":83,"percentile":322},"2026-06-27",0.31918,{"date":324,"score":83,"percentile":325},"2026-06-28",0.31896,{"date":327,"score":83,"percentile":328},"2026-06-29",0.319,{"date":330,"score":83,"percentile":331},"2026-06-30",0.31872,{"date":333,"score":83,"percentile":334},"2026-07-01",0.31974,{"date":336,"score":83,"percentile":337},"2026-07-02",0.32004,{"date":339,"score":83,"percentile":340},"2026-07-03",0.32022,{"date":342,"score":83,"percentile":343},"2026-07-04",0.32026,{"date":130,"score":83,"percentile":131},[346,350],{"source":87,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":347,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":348,"vectorString":88,"impactScore":85,"exploitabilityScore":349},"CRITICAL",10,{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":351,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":348,"vectorString":88,"impactScore":85,"exploitabilityScore":349},[353,385],{"ecosystem":9,"name":354,"vendor":355,"product":355,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":357},"Linux","linux","a",[358,365,368,371,374,377,380,383],{"version":359,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":363,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47",true,"b19bc2945b40b9fd38e835700907ffe8534ef0de","including","f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47","excluding",{"version":366,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":367,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C fb1f54b7d16f393b8b65d328410f78b4beea8fcc","fb1f54b7d16f393b8b65d328410f78b4beea8fcc",{"version":369,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":370,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C 3fd6547f5b8ac99687be6d937a0321efda760597","3fd6547f5b8ac99687be6d937a0321efda760597",{"version":372,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":373,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C eb9c6aeb512f877cf397deb1e4526f646c70e4a7","eb9c6aeb512f877cf397deb1e4526f646c70e4a7",{"version":375,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":376,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C 15fa9ead4d5e6b6b9c794e84144146c917f2cb62","15fa9ead4d5e6b6b9c794e84144146c917f2cb62",{"version":378,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":379,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C b313e9037d98c13938740e5ebda7852929366dff","b313e9037d98c13938740e5ebda7852929366dff",{"version":381,"is_range":360,"range_type":87,"version_start":361,"version_start_type":362,"version_end":382,"version_end_type":364,"fixed_in":9},">= b19bc2945b40b9fd38e835700907ffe8534ef0de, \u003C 9b55b253907e7431210483519c5ad711a37dafa1","9b55b253907e7431210483519c5ad711a37dafa1",{"version":384,"is_range":81,"range_type":87,"version_start":384,"version_start_type":362,"version_end":384,"version_end_type":362,"fixed_in":9},"5.12",{"ecosystem":9,"name":386,"vendor":355,"product":387,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":388},"Linux Kernel","linux kernel",[389,394,398,402,406,410,414,415,417,419,421,423,425,427],{"version":390,"is_range":360,"range_type":391,"version_start":392,"version_start_type":362,"version_end":393,"version_end_type":364,"fixed_in":9},"gte5.12.1_lt5.15.203","cpe","5.12.1","5.15.203",{"version":395,"is_range":360,"range_type":391,"version_start":396,"version_start_type":362,"version_end":397,"version_end_type":364,"fixed_in":9},"gte5.16_lt6.1.169","5.16","6.1.169",{"version":399,"is_range":360,"range_type":391,"version_start":400,"version_start_type":362,"version_end":401,"version_end_type":364,"fixed_in":9},"gte6.2_lt6.6.135","6.2","6.6.135",{"version":403,"is_range":360,"range_type":391,"version_start":404,"version_start_type":362,"version_end":405,"version_end_type":364,"fixed_in":9},"gte6.7_lt6.12.82","6.7","6.12.82",{"version":407,"is_range":360,"range_type":391,"version_start":408,"version_start_type":362,"version_end":409,"version_end_type":364,"fixed_in":9},"gte6.13_lt6.18.23","6.13","6.18.23",{"version":411,"is_range":360,"range_type":391,"version_start":412,"version_start_type":362,"version_end":413,"version_end_type":364,"fixed_in":9},"gte6.19_lt6.19.13","6.19","6.19.13",{"version":384,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":416,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":418,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":420,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":422,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":424,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":426,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":428,"is_range":81,"range_type":391,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]