Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-31402

37
FAUCET Score

CVE-2026-31402 describes a heap overflow vulnerability in the Linux kernel's NFSv4.0 server component (nfsd). This flaw allows an undersized replay cache buffer to be overwritten by up to 944 bytes when processing a large LOCK denied response, corrupting adjacent heap memory. An unauthenticated, remote attacker can trigger this by coordinating two NFSv4.0 clients to provoke a lock denial. This could lead to denial of service or potentially arbitrary code execution. Currently, there is no public exploit code, active exploitation, or significant community attention reported for this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.12.1, < 5.10.253CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 6.1.167CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.130CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.78CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.13, < 6.18.20CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.49%
Probability of exploitation in next 30 days
EPSS Percentile
39.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0049 is in the 17th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (107)

ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.8 (jammy)Fixed in: 6.8.0-1062.69~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (noble)Fixed in: 6.8.0-1062.69
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1063.71~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1063.71
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.17 (noble)Fixed in: 6.17.0-1018.18~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.17 (noble)Fixed in: 6.17.0-1021.21~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.4 (bionic)Fixed in: 5.4.0-1107.112~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (focal)Fixed in: 5.4.0-1107.112
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-5.4 (bionic)Fixed in: 5.4.0-1161.172~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-5.4 (bionic)Fixed in: 5.4.0-1166.172~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-5.4 (bionic)Fixed in: 5.4.0-1164.173~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.4 (bionic)Fixed in: 5.4.0-233.253~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-5.4 (bionic)Fixed in: 5.4.0-1159.169~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (focal)Fixed in: 5.4.0-233.253
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (focal)Fixed in: 5.4.0-1161.172
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (focal)Fixed in: 5.4.0-1161.172+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (focal)Fixed in: 5.4.0-1166.172
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (focal)Fixed in: 5.4.0-1166.172+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-bluefield (focal)Fixed in: 5.4.0-1120.127
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (focal)Fixed in: 5.4.0-1135.145
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (focal)Fixed in: 5.4.0-1164.173
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (focal)Fixed in: 5.4.0-1164.173+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-iot (focal)Fixed in: 5.4.0-1065.68
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (focal)Fixed in: 5.4.0-1159.169
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (focal)Fixed in: 5.4.0-1079.83
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (jammy)Fixed in: 5.15.0-1116.125+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1060.63~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1063.69~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1060.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1057.58~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1058.64
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1045.48
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1058.61.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.17 (noble)Fixed in: 6.17.0-1017.19~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (questing)Fixed in: 6.17.0-1017.19
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.17 (noble)Fixed in: 6.17.0-1019.19~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.17 (noble)Fixed in: 6.17.0-1020.22~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.17 (noble)Fixed in: 6.17.0-1018.18~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (questing)Fixed in: 6.17.0-1019.19
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (questing)Fixed in: 6.17.0-1020.22
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (questing)Fixed in: 6.17.0-1018.18
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-5.15 (focal)Fixed in: 5.15.0-1111.118~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-185.195~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.15 (focal)Fixed in: 5.15.0-1105.109~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-183.193~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1063.63~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (jammy)Fixed in: 5.15.0-185.195
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (jammy)Fixed in: 5.15.0-1111.118
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (jammy)Fixed in: 5.15.0-1111.118+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (jammy)Fixed in: 5.15.0-1116.125
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (jammy)Fixed in: 5.15.0-185.195+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (jammy)Fixed in: 5.15.0-1111.121
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1111.121+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (jammy)Fixed in: 5.15.0-1107.113
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (jammy)Fixed in: 5.15.0-1094.102
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (jammy)Fixed in: 5.15.0-1105.109
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1103.105
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg (jammy)Fixed in: 5.15.0-1106.112
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (jammy)Fixed in: 5.15.0-1103.108
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (jammy)Fixed in: 5.15.0-183.193
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (jammy)Fixed in: 5.15.0-1106.107
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (jammy)Fixed in: 5.15.0-1063.63
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-igx (jammy)Fixed in: 5.15.0-1052.52
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (jammy)Fixed in: 5.15.0-1108.114
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (jammy)Fixed in: 5.15.0-1110.119
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1055.56~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-134.134
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1060.63
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1060.63+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1063.69
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1063.69+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1060.61
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1057.58
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1055.56
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-6.17 (noble)Fixed in: 6.17.0-1028.28
ubuntupatch availablevia ubuntu_usn
Product: linux (questing)Fixed in: 6.17.0-40.40
ubuntupatch availablevia ubuntu_usn
Product: linux (trusty)Fixed in: 3.13.0-214.265
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-5.15 (focal)Fixed in: 5.15.0-1108.114~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1032.33
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (noble)Fixed in: 6.8.0-1029.30
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-134.134.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-134.134.1
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2049.50
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (bionic)Fixed in: 4.15.0-1194.207
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (bionic)Fixed in: 4.15.0-2132.138
ubuntupatch availablevia ubuntu_usn
Product: linux (bionic)Fixed in: 4.15.0-253.265
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-4.15 (bionic)Fixed in: 4.15.0-1204.219
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (bionic)Fixed in: 4.15.0-2112.118
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (bionic)Fixed in: 4.15.0-1149.161
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-4.15 (bionic)Fixed in: 4.15.0-1187.204
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (bionic)Fixed in: 4.15.0-2095.101
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (bionic)Fixed in: 4.15.0-1176.181
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (bionic)Fixed in: 4.15.0-1156.167
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1074.78
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (jammy)Fixed in: 5.15.0-1105.108
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1062.69+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-134.134+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-6.17 (noble)Fixed in: 6.17.0-40.40~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (trusty)Fixed in: 4.4.0-1156.162
ubuntupatch availablevia ubuntu_usn
Product: linux-lts-xenial (trusty)Fixed in: 4.4.0-283.317~14.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (xenial)Fixed in: 4.4.0-1126.133
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-5.15 (focal)Fixed in: 5.15.0-1111.121~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg-5.15 (focal)Fixed in: 5.15.0-1106.112~20.04.1

Vendor Advisories (28)

ubuntuUSN-8616-1

Linux kernel (IBM) vulnerabilities

Jul 28, 2026
ubuntuUSN-8615-1

Linux kernel vulnerabilities

Jul 28, 2026
ubuntuUSN-8547-2

Linux kernel (Azure FIPS) vulnerabilities

Jul 28, 2026
ubuntuUSN-8609-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8607-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8606-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8605-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8604-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8490-2

Linux kernel (Real-time) vulnerabilities

Jul 17, 2026
ubuntuUSN-8548-1

Linux kernel vulnerabilities

Jul 15, 2026
ubuntuUSN-8547-1

Linux kernel vulnerabilities

Jul 15, 2026
ubuntuUSN-8545-1

Linux kernel (HWE) vulnerabilities

Jul 15, 2026
ubuntuUSN-8530-1

Linux kernel (AWS) vulnerabilities

Jul 10, 2026
ubuntuUSN-8529-1

Linux kernel vulnerabilities

Jul 10, 2026
ubuntuUSN-8528-1

Linux kernel (Xilinx ZynqMP) vulnerabilities

Jul 10, 2026
ubuntuUSN-8527-1

Linux kernel (Raspberry Pi) vulnerabilities

Jul 10, 2026
ubuntuUSN-8492-5

Linux kernel (FIPS) vulnerabilities

Jul 10, 2026
ubuntuUSN-8492-3

Linux kernel (Raspberry Pi Real-time) vulnerabilities

Jul 6, 2026
ubuntuUSN-8501-1

Linux kernel vulnerabilities

Jul 2, 2026
ubuntuUSN-8493-2

Linux kernel (Oracle) vulnerabilities

Jul 2, 2026
ubuntuUSN-8499-1

Linux kernel (Xilinx) vulnerabilities

Jul 2, 2026
ubuntuUSN-8498-1

Linux kernel (NVIDIA Tegra) vulnerabilities

Jul 2, 2026
ubuntuUSN-8497-1

Linux kernel (Low Latency) vulnerabilities

Jul 2, 2026
ubuntuUSN-8492-2

Linux kernel vulnerabilities

Jul 2, 2026
ubuntuUSN-8493-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8492-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8491-1

Linux kernel (OEM) vulnerabilities

Jul 1, 2026
ubuntuUSN-8490-1

Linux kernel vulnerabilities

Jul 1, 2026

References

access.redhat.com / errata/RHSA-2026:10108
access.redhat.com / errata/RHSA-2026:11313
access.redhat.com / errata/RHSA-2026:13565
access.redhat.com / errata/RHSA-2026:13566
access.redhat.com / errata/RHSA-2026:13577
access.redhat.com / errata/RHSA-2026:13578
access.redhat.com / errata/RHSA-2026:13664
access.redhat.com / errata/RHSA-2026:13681
access.redhat.com / errata/RHSA-2026:13734
access.redhat.com / errata/RHSA-2026:13936
access.redhat.com / errata/RHSA-2026:14137
access.redhat.com / errata/RHSA-2026:14165
access.redhat.com / errata/RHSA-2026:14301
access.redhat.com / errata/RHSA-2026:14823
access.redhat.com / errata/RHSA-2026:14869
access.redhat.com / errata/RHSA-2026:14925
access.redhat.com / errata/RHSA-2026:15883
access.redhat.com / errata/RHSA-2026:19568
access.redhat.com / errata/RHSA-2026:19569
access.redhat.com / errata/RHSA-2026:36530
access.redhat.com / errata/RHSA-2026:36531
access.redhat.com / errata/RHSA-2026:36532
access.redhat.com / errata/RHSA-2026:36533
access.redhat.com / errata/RHSA-2026:36534
access.redhat.com / security/cve/CVE-2026-31402
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-31402.json
cert-portal.siemens.com / productcert/html/ssa-019113.html
cert-portal.siemens.com / productcert/html/ssa-082556.html
git.kernel.org / stable/c/0f0e2a54a31a7f9ad2915db99156114872317388
Patch
git.kernel.org / stable/c/2665887a69437a8a4f552f69509eecfb73d4aa19
git.kernel.org / stable/c/5133b61aaf437e5f25b1b396b14242a6bb0508e2
Patch
git.kernel.org / stable/c/8afb437ea1f70cacb4bbdf11771fb5c4d720b965
Patch
git.kernel.org / stable/c/ae8498337dfdfda71bdd0b807c9a23a126011d76
Patch
git.kernel.org / stable/c/c9452c0797c95cf2378170df96cf4f4b3bca7eff
Patch
git.kernel.org / stable/c/dad0c3c0a8e5d1d6eb0fc455694ce3e25e6c57d0
Patch
git.kernel.org / stable/c/f9fcb4441f6c02bb20c2eb340101e27dfe23607c
Patch