CVE-2026-31700
7.8Linux · Kernel
A time-of-check to time-of-use race condition in the Linux kernel packet subsystem allows local users to bypass safety checks and achieve high privileges.
Executive summary
A time-of-check to time-of-use race condition vulnerability in the Linux kernel packet subsystem could allow an authenticated local attacker to achieve high impact on confidentiality, integrity, and availability.
Vulnerability
This is a time-of-check to time-of-use race condition vulnerability within the tpacket_snd() function of the network packet subsystem, requiring low local privileges to exploit.
Business impact
A successful exploit of this vulnerability can result in full compromise of the affected host operating system, leading to unauthorized access, data exfiltration, or system crashes. The assigned CVSS score of 7.8 indicates a high severity threat that primarily targets local system security boundaries.
Remediation
Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.136, or later depending on the active distribution branch.
Proactive Monitoring: Monitor system audit logs for unauthorized local privilege escalation attempts and unusual kernel crash dumps.
Compensating Controls: Restrict local shell access and apply strict user permission policies to limit untrusted users from executing arbitrary code on the host.
Exploitation status
Public Exploit Available: false
Analyst recommendation
Administrators managing Linux infrastructure must prioritize applying the latest kernel updates provided by their vendor. Updating the system immediately is essential to close the race window and prevent potential local exploitation.