CVE-2026-31627 (GCVE-0-2026-31627)

Vulnerability from cvelistv5 – Published: 2026-04-24 14:42 – Updated: 2026-08-05 12:23
VLAI
Title
i2c: s3c24xx: check the size of the SMBUS message before using it
Summary
In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The first byte of an i2c SMBUS message is the size, and it should be verified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX before processing it. This is the same logic that was added in commit a6e04f05ce0b ("i2c: tegra: check msg length in SMBUS block read") to the i2c tegra driver.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < fd1650da24ed54c716aa9b69e9bbd8a662e492da (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < 8f756a5964396da0fc9e0db33253a5b85dbbcbb6 (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < 2d262da4bca6fab96e2e709feb95b31b0a9a03a7 (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < fa00738ab30b07db1a43b9c85fc56b8cc3b7d197 (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < d87d5620125a03b1eadbd5df39748215d3db7ddb (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < 377fae22a137b6b89f3f32399a58c52cf2325416 (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < 71b3c316b22c555d2769126a92b1244b15a9750d (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b (git)
Affected: 85747311ecb6167c989093c64a13807366fdd3a9 , < c0128c7157d639a931353ea344fb44aad6d6e17a (git)
Create a notification for this product.
Linux Linux Affected: 3.10
Unaffected: 0 , < 3.10 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.136 , ≤ 6.6.* (semver)
Unaffected: 6.12.83 , ≤ 6.12.* (semver)
Unaffected: 6.18.24 , ≤ 6.18.* (semver)
Unaffected: 6.19.14 , ≤ 6.19.* (semver)
Unaffected: 7.0.1 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-s3c2410.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd1650da24ed54c716aa9b69e9bbd8a662e492da",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "8f756a5964396da0fc9e0db33253a5b85dbbcbb6",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "2d262da4bca6fab96e2e709feb95b31b0a9a03a7",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "fa00738ab30b07db1a43b9c85fc56b8cc3b7d197",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "d87d5620125a03b1eadbd5df39748215d3db7ddb",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "377fae22a137b6b89f3f32399a58c52cf2325416",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "71b3c316b22c555d2769126a92b1244b15a9750d",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            },
            {
              "lessThan": "c0128c7157d639a931353ea344fb44aad6d6e17a",
              "status": "affected",
              "version": "85747311ecb6167c989093c64a13807366fdd3a9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-s3c2410.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "lessThan": "3.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.83",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.1",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "3.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: s3c24xx: check the size of the SMBUS message before using it\n\nThe first byte of an i2c SMBUS message is the size, and it should be\nverified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX\nbefore processing it.\n\nThis is the same logic that was added in commit a6e04f05ce0b (\"i2c:\ntegra: check msg length in SMBUS block read\") to the i2c tegra driver."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reachable from local userspace through `/dev/i2c-*` ioctls (`I2C_SMBUS` or `I2C_RDWR`) into the s3c24xx adapter transfer routine. The malformed length byte is supplied by the selected I2C/SMBus slave during that local transaction.\nAC:L - Once an attacker can issue a block read to an attacker-controlled or malicious SMBus slave, returning a zero or greater-than-32 first byte deterministically reaches the bug. There is no race or condition outside the attacker\u0027s control in the vulnerable length handling.\nPR:L - The kernel path has no capability check; the attacker only needs local access to the relevant i2c-dev character device, commonly granted via device permissions or an i2c-like group. This is not a real init-namespace root requirement.\nUI:N - No victim action is needed after the attacker has access to the bus interface and target slave response. The attacker can initiate the SMBus block read directly.\nS:U - The corruption occurs in kernel memory within the same kernel security authority. It does not cross a hypervisor, IOMMU, or other separate security scope boundary.\nC:H - An oversized device-supplied SMBus length makes the driver read and store beyond the allocated SMBus buffer, and raw i2c-dev paths can also copy back using the inflated length. This can disclose adjacent kernel memory.\nI:H - The slave controls bytes written past the end of the kernel SMBus buffer, creating an out-of-bounds kernel memory write. Such memory corruption is defensibly exploitable for arbitrary corruption or control-flow impact.\nA:H - The out-of-bounds kernel write can corrupt heap or stack state and reliably cause an oops, panic, or hang. Repeated local triggering can deny service to the system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:23:54.379Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd1650da24ed54c716aa9b69e9bbd8a662e492da"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f756a5964396da0fc9e0db33253a5b85dbbcbb6"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d262da4bca6fab96e2e709feb95b31b0a9a03a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/fa00738ab30b07db1a43b9c85fc56b8cc3b7d197"
        },
        {
          "url": "https://git.kernel.org/stable/c/d87d5620125a03b1eadbd5df39748215d3db7ddb"
        },
        {
          "url": "https://git.kernel.org/stable/c/377fae22a137b6b89f3f32399a58c52cf2325416"
        },
        {
          "url": "https://git.kernel.org/stable/c/71b3c316b22c555d2769126a92b1244b15a9750d"
        },
        {
          "url": "https://git.kernel.org/stable/c/aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a"
        }
      ],
      "title": "i2c: s3c24xx: check the size of the SMBUS message before using it",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31627",
    "datePublished": "2026-04-24T14:42:48.342Z",
    "dateReserved": "2026-03-09T15:48:24.124Z",
    "dateUpdated": "2026-08-05T12:23:54.379Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-31627",
      "date": "2026-08-05",
      "epss": "0.00131",
      "percentile": "0.03123"
    },
    "microsoft_vex": {
      "current_release_date": "2026-05-01T14:41:56.000Z",
      "cve": "CVE-2026-31627",
      "id": "msrc_CVE-2026-31627",
      "initial_release_date": "2026-04-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "i2c: s3c24xx: check the size of the SMBUS message before using it",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-31627.json",
      "version": "6"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-31627\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-04-24T15:16:42.003\",\"lastModified\":\"2026-06-17T10:34:07.193\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ni2c: s3c24xx: check the size of the SMBUS message before using it\\n\\nThe first byte of an i2c SMBUS message is the size, and it should be\\nverified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX\\nbefore processing it.\\n\\nThis is the same logic that was added in commit a6e04f05ce0b (\\\"i2c:\\ntegra: check msg length in SMBUS block read\\\") to the i2c tegra driver.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/i2c/busses/i2c-s3c2410.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"fd1650da24ed54c716aa9b69e9bbd8a662e492da\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"8f756a5964396da0fc9e0db33253a5b85dbbcbb6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"2d262da4bca6fab96e2e709feb95b31b0a9a03a7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"fa00738ab30b07db1a43b9c85fc56b8cc3b7d197\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"d87d5620125a03b1eadbd5df39748215d3db7ddb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"377fae22a137b6b89f3f32399a58c52cf2325416\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"71b3c316b22c555d2769126a92b1244b15a9750d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85747311ecb6167c989093c64a13807366fdd3a9\",\"lessThan\":\"c0128c7157d639a931353ea344fb44aad6d6e17a\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/i2c/busses/i2c-s3c2410.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.10\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.10\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.136\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.83\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.24\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.14\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.1\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.10.1\",\"versionEndExcluding\":\"6.6.136\",\"matchCriteriaId\":\"FB898C76-28CD-416F-9777-F00444862F17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.83\",\"matchCriteriaId\":\"7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.24\",\"matchCriteriaId\":\"8126B8B8-6D0B-4443-86C1-672AEE893555\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.14\",\"matchCriteriaId\":\"D6A8A074-BBF4-4803-ABED-519A839435BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0\",\"versionEndExcluding\":\"7.0.1\",\"matchCriteriaId\":\"9B5888AB-7403-4335-89E4-21CC0B48366A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.10:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"82D28405-E1F2-43CF-AA38-B228805AFFF9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2d262da4bca6fab96e2e709feb95b31b0a9a03a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/377fae22a137b6b89f3f32399a58c52cf2325416\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/71b3c316b22c555d2769126a92b1244b15a9750d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8f756a5964396da0fc9e0db33253a5b85dbbcbb6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d87d5620125a03b1eadbd5df39748215d3db7ddb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fa00738ab30b07db1a43b9c85fc56b8cc3b7d197\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fd1650da24ed54c716aa9b69e9bbd8a662e492da\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T12:04:35+00:00",
      "cve": "CVE-2026-31627",
      "id": "CVE-2026-31627",
      "initial_release_date": "2026-04-24T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: i2c: s3c24xx: check the size of the SMBUS message before using it",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31627.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-22T00:06:32Z",
      "cve": "CVE-2026-31627",
      "id": "CVE-2026-31627",
      "initial_release_date": "2026-04-25T01:37:39Z",
      "product_status:known_affected": "216",
      "product_status:known_not_affected": "95",
      "product_status:recommended": "102",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-31627",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-31627.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.