[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31772":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":36,"related":37,"reserved_at":9,"published_at":38,"modified_at":39,"state":40,"summary":41,"references_raw":50,"kevs":69,"epss":70,"epss_history":73,"metrics":262,"affected":270},"CVE-2026-31772","In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync\n\nhci_le_big_create_sync() uses DEFINE_FLEX to allocate a\nstruct hci_cp_le_big_create_sync on the stack with room for 0x11 (17)\nBIS entries.  However, conn->num_bis can hold up to HCI_MAX_ISO_BIS (31)\nentries — validated against ISO_MAX_NUM_BIS (0x1f) in the caller\nhci_conn_big_create_sync().  When conn->num_bis is between 18 and 31,\nthe memcpy that copies conn->bis into cp->bis writes up to 14 bytes\npast the stack buffer, corrupting adjacent stack memory.\n\nThis is trivially reproducible: binding an ISO socket with\nbc_num_bis = ISO_MAX_NUM_BIS (31) and calling listen() will\neventually trigger hci_le_big_create_sync() from the HCI command\nsync worker, causing a KASAN-detectable stack-out-of-bounds write:\n\n  BUG: KASAN: stack-out-of-bounds in hci_le_big_create_sync+0x256/0x3b0\n  Write of size 31 at addr ffffc90000487b48 by task kworker/u9:0/71\n\nFix this by changing the DEFINE_FLEX count from the incorrect 0x11 to\nHCI_MAX_ISO_BIS, which matches the maximum number of BIS entries that\nconn->bis can actually carry.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[],[],[],[24,26,28,30,32,34],{"_key":25},"DEBIAN-CVE-2026-31772",{"_key":27},"RHSA-2026:27288",{"_key":29},"RHSA-2026:27789",{"_key":31},"UBUNTU-CVE-2026-31772",{"_key":33},"USN-8567-1",{"_key":35},"USN-8574-1",[],[],"2026-05-01T14:15:00.582Z","2026-05-23T16:05:54.091Z","Analyzed",{"cisa_kev":42,"cisa_ransomware":42,"cisa_vendor":9,"epss_severity":43,"epss_score":44,"severity":45,"severity_score":46,"severity_version":47,"severity_source":48,"severity_vector":49,"severity_status":40},false,"low",0.00142,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[51,57,61,65],{"url":52,"sources":53,"tags":55},"https://git.kernel.org/stable/c/f5d446624345d309e7a4a1b27ea9f028d6a8c5d9",[48,54],"nvd",[56],"Patch",{"url":58,"sources":59,"tags":60},"https://git.kernel.org/stable/c/aba0aea354015794e8312dd7efe726967e58aefe",[48,54],[56],{"url":62,"sources":63,"tags":64},"https://git.kernel.org/stable/c/eaf32002ca7b1ba51c9f140991fd9febe6de79f0",[48,54],[56],{"url":66,"sources":67,"tags":68},"https://git.kernel.org/stable/c/bc39a094730ce062fa034a529c93147c096cb488",[48,54],[56],[],{"date":71,"score":44,"percentile":72},"2026-07-05",0.0387,[74,78,82,85,87,90,94,97,100,103,105,107,110,113,116,119,122,124,127,130,133,136,139,142,145,148,151,154,157,160,163,166,170,173,175,178,181,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,227,230,233,236,239,241,244,247,250,253,256,259,261],{"date":75,"score":76,"percentile":77},"2026-05-02",0.00018,0.0466,{"date":79,"score":80,"percentile":81},"2026-05-03",0.00012,0.01739,{"date":83,"score":80,"percentile":84},"2026-05-04",0.01737,{"date":86,"score":80,"percentile":84},"2026-05-05",{"date":88,"score":80,"percentile":89},"2026-05-06",0.01725,{"date":91,"score":92,"percentile":93},"2026-05-07",0.00013,0.02363,{"date":95,"score":92,"percentile":96},"2026-05-08",0.02376,{"date":98,"score":92,"percentile":99},"2026-05-09",0.02403,{"date":101,"score":92,"percentile":102},"2026-05-10",0.02399,{"date":104,"score":92,"percentile":102},"2026-05-11",{"date":106,"score":92,"percentile":102},"2026-05-12",{"date":108,"score":92,"percentile":109},"2026-05-13",0.02411,{"date":111,"score":92,"percentile":112},"2026-05-14",0.02424,{"date":114,"score":92,"percentile":115},"2026-05-15",0.02432,{"date":117,"score":92,"percentile":118},"2026-05-16",0.02446,{"date":120,"score":92,"percentile":121},"2026-05-17",0.02443,{"date":123,"score":92,"percentile":112},"2026-05-18",{"date":125,"score":92,"percentile":126},"2026-05-19",0.0241,{"date":128,"score":92,"percentile":129},"2026-05-20",0.02406,{"date":131,"score":92,"percentile":132},"2026-05-21",0.02389,{"date":134,"score":92,"percentile":135},"2026-05-22",0.02535,{"date":137,"score":92,"percentile":138},"2026-05-23",0.02529,{"date":140,"score":92,"percentile":141},"2026-05-24",0.025,{"date":143,"score":92,"percentile":144},"2026-05-25",0.02486,{"date":146,"score":92,"percentile":147},"2026-05-26",0.02454,{"date":149,"score":92,"percentile":150},"2026-05-27",0.02473,{"date":152,"score":92,"percentile":153},"2026-05-28",0.02465,{"date":155,"score":92,"percentile":156},"2026-05-29",0.02472,{"date":158,"score":92,"percentile":159},"2026-05-30",0.02495,{"date":161,"score":92,"percentile":162},"2026-05-31",0.02488,{"date":164,"score":92,"percentile":165},"2026-06-01",0.02474,{"date":167,"score":168,"percentile":169},"2026-06-02",0.00015,0.03519,{"date":171,"score":168,"percentile":172},"2026-06-03",0.03509,{"date":174,"score":168,"percentile":172},"2026-06-04",{"date":176,"score":168,"percentile":177},"2026-06-05",0.03516,{"date":179,"score":168,"percentile":180},"2026-06-06",0.0353,{"date":182,"score":168,"percentile":177},"2026-06-07",{"date":184,"score":168,"percentile":185},"2026-06-08",0.03495,{"date":187,"score":168,"percentile":188},"2026-06-09",0.035,{"date":190,"score":168,"percentile":191},"2026-06-10",0.03493,{"date":193,"score":168,"percentile":194},"2026-06-11",0.03517,{"date":196,"score":168,"percentile":197},"2026-06-12",0.03531,{"date":199,"score":168,"percentile":200},"2026-06-13",0.03521,{"date":202,"score":168,"percentile":203},"2026-06-14",0.03535,{"date":205,"score":44,"percentile":206},"2026-06-15",0.03807,{"date":208,"score":44,"percentile":209},"2026-06-16",0.03816,{"date":211,"score":44,"percentile":212},"2026-06-17",0.0383,{"date":214,"score":44,"percentile":215},"2026-06-18",0.03829,{"date":217,"score":44,"percentile":218},"2026-06-19",0.03825,{"date":220,"score":44,"percentile":221},"2026-06-20",0.03823,{"date":223,"score":44,"percentile":224},"2026-06-21",0.0382,{"date":226,"score":44,"percentile":209},"2026-06-22",{"date":228,"score":44,"percentile":229},"2026-06-23",0.03834,{"date":231,"score":44,"percentile":232},"2026-06-24",0.03839,{"date":234,"score":44,"percentile":235},"2026-06-25",0.03851,{"date":237,"score":44,"percentile":238},"2026-06-26",0.03865,{"date":240,"score":44,"percentile":238},"2026-06-27",{"date":242,"score":44,"percentile":243},"2026-06-28",0.03886,{"date":245,"score":44,"percentile":246},"2026-06-29",0.03883,{"date":248,"score":44,"percentile":249},"2026-06-30",0.03877,{"date":251,"score":44,"percentile":252},"2026-07-01",0.03881,{"date":254,"score":44,"percentile":255},"2026-07-02",0.03872,{"date":257,"score":44,"percentile":258},"2026-07-03",0.03867,{"date":260,"score":44,"percentile":72},"2026-07-04",{"date":71,"score":44,"percentile":72},[263,268],{"source":48,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":264,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":265,"vectorString":49,"impactScore":266,"exploitabilityScore":267},"HIGH",9.8,4.6,{"source":54,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":269,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":265,"vectorString":49,"impactScore":266,"exploitabilityScore":267},[271,305],{"ecosystem":9,"name":272,"vendor":273,"product":273,"cpe_part":274,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":275},"Linux","linux","a",[276,283,287,290,293,295,299,303],{"version":277,"is_range":278,"range_type":48,"version_start":279,"version_start_type":280,"version_end":281,"version_end_type":282,"fixed_in":9},">= 91d19383b7ed035e22165ae5c836e50bb9f95fbe, \u003C f5d446624345d309e7a4a1b27ea9f028d6a8c5d9",true,"91d19383b7ed035e22165ae5c836e50bb9f95fbe","including","f5d446624345d309e7a4a1b27ea9f028d6a8c5d9","excluding",{"version":284,"is_range":278,"range_type":48,"version_start":285,"version_start_type":280,"version_end":286,"version_end_type":282,"fixed_in":9},">= 42ecf1947135110ea08abeaca39741636f9a2285, \u003C aba0aea354015794e8312dd7efe726967e58aefe","42ecf1947135110ea08abeaca39741636f9a2285","aba0aea354015794e8312dd7efe726967e58aefe",{"version":288,"is_range":278,"range_type":48,"version_start":285,"version_start_type":280,"version_end":289,"version_end_type":282,"fixed_in":9},">= 42ecf1947135110ea08abeaca39741636f9a2285, \u003C eaf32002ca7b1ba51c9f140991fd9febe6de79f0","eaf32002ca7b1ba51c9f140991fd9febe6de79f0",{"version":291,"is_range":278,"range_type":48,"version_start":285,"version_start_type":280,"version_end":292,"version_end_type":282,"fixed_in":9},">= 42ecf1947135110ea08abeaca39741636f9a2285, \u003C bc39a094730ce062fa034a529c93147c096cb488","bc39a094730ce062fa034a529c93147c096cb488",{"version":294,"is_range":42,"range_type":48,"version_start":294,"version_start_type":280,"version_end":294,"version_end_type":280,"fixed_in":9},"8958e1cee4e2eac1a5b825caa4dd96ce9ed975dd",{"version":296,"is_range":278,"range_type":48,"version_start":297,"version_start_type":280,"version_end":298,"version_end_type":282,"fixed_in":9},">= 6.12.2, \u003C 6.12.81","6.12.2","6.12.81",{"version":300,"is_range":278,"range_type":48,"version_start":301,"version_start_type":280,"version_end":302,"version_end_type":282,"fixed_in":9},">= 6.11.11, \u003C 6.12","6.11.11","6.12",{"version":304,"is_range":42,"range_type":48,"version_start":304,"version_start_type":280,"version_end":304,"version_end_type":280,"fixed_in":9},"6.13",{"ecosystem":9,"name":306,"vendor":273,"product":307,"cpe_part":274,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":308},"Linux Kernel","linux kernel",[309,312,314,318,322,323,325,327,329,331,333],{"version":310,"is_range":278,"range_type":311,"version_start":301,"version_start_type":280,"version_end":302,"version_end_type":282,"fixed_in":9},"gte6.11.11_lt6.12","cpe",{"version":313,"is_range":278,"range_type":311,"version_start":297,"version_start_type":280,"version_end":298,"version_end_type":282,"fixed_in":9},"gte6.12.2_lt6.12.81",{"version":315,"is_range":278,"range_type":311,"version_start":316,"version_start_type":280,"version_end":317,"version_end_type":282,"fixed_in":9},"gte6.13.1_lt6.18.22","6.13.1","6.18.22",{"version":319,"is_range":278,"range_type":311,"version_start":320,"version_start_type":280,"version_end":321,"version_end_type":282,"fixed_in":9},"gte6.19_lt6.19.12","6.19","6.19.12",{"version":304,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":324,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":326,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":328,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":330,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":332,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":334,"is_range":42,"range_type":311,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6"]