CVE-2026-31780 (GCVE-0-2026-31780)

Vulnerability from cvelistv5 – Published: 2026-05-01 14:15 – Updated: 2026-08-05 12:25
VLAI
Title
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation The variable valuesize is declared as u8 but accumulates the total length of all SSIDs to scan. Each SSID contributes up to 33 bytes (IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10) SSIDs the total can reach 330, which wraps around to 74 when stored in a u8. This causes kmalloc to allocate only 75 bytes while the subsequent memcpy writes up to 331 bytes into the buffer, resulting in a 256-byte heap buffer overflow. Widen valuesize from u8 to u32 to accommodate the full range.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < 34a23fd9ddd683a03c7e8cc0ceded3e59e354b99 (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < 549f02d8ec94d39092ab6d9b103d0d6783a4b024 (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < bfbddeadd4779651403035ee177ae2f22f9f5521 (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < 9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7 (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < c97b2a00059608592ad0d86fbb813a4f8cf9464b (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < d8388614de613c28eeb659c10115060a83739924 (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < 0c7f21d8bd2f93998b72b7a7f93152336aeca4dd (git)
Affected: c5c77ba18ea66aa05441c71e38473efb787705a4 , < d049e56b1739101d1c4d81deedb269c52a8dbba0 (git)
Create a notification for this product.
Linux Linux Affected: 4.2
Unaffected: 0 , < 4.2 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.168 , ≤ 6.1.* (semver)
Unaffected: 6.6.134 , ≤ 6.6.* (semver)
Unaffected: 6.12.81 , ≤ 6.12.* (semver)
Unaffected: 6.18.22 , ≤ 6.18.* (semver)
Unaffected: 6.19.12 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/microchip/wilc1000/hif.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "34a23fd9ddd683a03c7e8cc0ceded3e59e354b99",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "549f02d8ec94d39092ab6d9b103d0d6783a4b024",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "bfbddeadd4779651403035ee177ae2f22f9f5521",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "c97b2a00059608592ad0d86fbb813a4f8cf9464b",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "d8388614de613c28eeb659c10115060a83739924",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "0c7f21d8bd2f93998b72b7a7f93152336aeca4dd",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            },
            {
              "lessThan": "d049e56b1739101d1c4d81deedb269c52a8dbba0",
              "status": "affected",
              "version": "c5c77ba18ea66aa05441c71e38473efb787705a4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/microchip/wilc1000/hif.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.81",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.22",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.168",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.134",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.81",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.22",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.12",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation\n\nThe variable valuesize is declared as u8 but accumulates the total\nlength of all SSIDs to scan. Each SSID contributes up to 33 bytes\n(IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10)\nSSIDs the total can reach 330, which wraps around to 74 when stored\nin a u8.\n\nThis causes kmalloc to allocate only 75 bytes while the subsequent\nmemcpy writes up to 331 bytes into the buffer, resulting in a 256-byte\nheap buffer overflow.\n\nWiden valuesize from u8 to u32 to accommodate the full range."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached by a local nl80211 generic-netlink trigger-scan request that supplies the probe SSID list. Over-the-air WiFi frames do not control this buffer.\nAC:L - The attacker can directly choose up to 10 SSIDs of up to 32 bytes each, reliably causing the u8 size wrap and heap overflow when scan is accepted. No race or hard-to-hit external condition is required.\nPR:L - NL80211_CMD_TRIGGER_SCAN is gated by GENL_UNS_ADMIN_PERM and netlink_ns_capable(..., CAP_NET_ADMIN), so namespace-scoped CAP_NET_ADMIN over the target wireless netns is sufficient. It is not reachable with no privileges.\nUI:N - No victim action is required once the attacker can issue the scan request. The attacker triggers the vulnerable code directly.\nS:U - The corruption occurs in the kernel while servicing a kernel wireless driver operation. It does not cross a VM, IOMMU, or other separate security authority boundary.\nC:H - The bug is a controlled kernel heap buffer overflow of up to 256 bytes, which can corrupt adjacent heap objects and plausibly support information disclosure during exploitation. Under the higher-severity rule, memory corruption is scored high for confidentiality.\nI:H - The attacker controls much of the data written past the undersized allocation into adjacent kernel heap memory. This is a kernel out-of-bounds write and is defensibly exploitable for integrity compromise.\nA:H - At minimum, the heap overflow can crash or oops the kernel, and it can be triggered repeatedly through scan requests. Kernel crash impact is high availability loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:25:08.895Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/34a23fd9ddd683a03c7e8cc0ceded3e59e354b99"
        },
        {
          "url": "https://git.kernel.org/stable/c/549f02d8ec94d39092ab6d9b103d0d6783a4b024"
        },
        {
          "url": "https://git.kernel.org/stable/c/bfbddeadd4779651403035ee177ae2f22f9f5521"
        },
        {
          "url": "https://git.kernel.org/stable/c/9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7"
        },
        {
          "url": "https://git.kernel.org/stable/c/c97b2a00059608592ad0d86fbb813a4f8cf9464b"
        },
        {
          "url": "https://git.kernel.org/stable/c/d8388614de613c28eeb659c10115060a83739924"
        },
        {
          "url": "https://git.kernel.org/stable/c/0c7f21d8bd2f93998b72b7a7f93152336aeca4dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/d049e56b1739101d1c4d81deedb269c52a8dbba0"
        }
      ],
      "title": "wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31780",
    "datePublished": "2026-05-01T14:15:07.253Z",
    "dateReserved": "2026-03-09T15:48:24.141Z",
    "dateUpdated": "2026-08-05T12:25:08.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-31780",
      "date": "2026-08-10",
      "epss": "0.00143",
      "percentile": "0.0402"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-31780\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-01T15:16:41.453\",\"lastModified\":\"2026-06-17T10:34:26.983\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation\\n\\nThe variable valuesize is declared as u8 but accumulates the total\\nlength of all SSIDs to scan. Each SSID contributes up to 33 bytes\\n(IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10)\\nSSIDs the total can reach 330, which wraps around to 74 when stored\\nin a u8.\\n\\nThis causes kmalloc to allocate only 75 bytes while the subsequent\\nmemcpy writes up to 331 bytes into the buffer, resulting in a 256-byte\\nheap buffer overflow.\\n\\nWiden valuesize from u8 to u32 to accommodate the full range.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/wireless/microchip/wilc1000/hif.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"34a23fd9ddd683a03c7e8cc0ceded3e59e354b99\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"549f02d8ec94d39092ab6d9b103d0d6783a4b024\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"bfbddeadd4779651403035ee177ae2f22f9f5521\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"c97b2a00059608592ad0d86fbb813a4f8cf9464b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"d8388614de613c28eeb659c10115060a83739924\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"0c7f21d8bd2f93998b72b7a7f93152336aeca4dd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c5c77ba18ea66aa05441c71e38473efb787705a4\",\"lessThan\":\"d049e56b1739101d1c4d81deedb269c52a8dbba0\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/wireless/microchip/wilc1000/hif.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.168\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.134\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.81\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.22\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.12\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.2\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"CC85AD7F-B910-43F1-9A7F-94BC2781DACB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.168\",\"matchCriteriaId\":\"E2DDDCA1-6DAB-4018-B920-8F045DDD8D3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.134\",\"matchCriteriaId\":\"F56F925B-BAF8-4F4B-B62F-1496AF19A307\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.81\",\"matchCriteriaId\":\"6EF80433-B33B-43C5-8E64-0FA7B8DCE1BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.22\",\"matchCriteriaId\":\"C9DF8BCE-36D3-475D-9D21-19E4F02F9029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.12\",\"matchCriteriaId\":\"0A2B9540-02D5-41B4-B16A-82AF66FD4F36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0c7f21d8bd2f93998b72b7a7f93152336aeca4dd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/34a23fd9ddd683a03c7e8cc0ceded3e59e354b99\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/549f02d8ec94d39092ab6d9b103d0d6783a4b024\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bfbddeadd4779651403035ee177ae2f22f9f5521\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c97b2a00059608592ad0d86fbb813a4f8cf9464b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d049e56b1739101d1c4d81deedb269c52a8dbba0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d8388614de613c28eeb659c10115060a83739924\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T07:28:10+00:00",
      "cve": "CVE-2026-31780",
      "id": "CVE-2026-31780",
      "initial_release_date": "2026-05-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31780.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-22T00:05:21Z",
      "cve": "CVE-2026-31780",
      "id": "CVE-2026-31780",
      "initial_release_date": "2026-05-06T01:42:39Z",
      "product_status:known_affected": "203",
      "product_status:known_not_affected": "33",
      "product_status:recommended": "98",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-31780",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-31780.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.