CVE-2026-31657

highcovered by 23 sourcesfirst seen 2026-07-09

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - NVME drivers; - File systems infrastructure; - Ext4 file system; - IPv4 networking; - Network traffic control; - TCP network protocol; - Locking primitives; - B.A.T.M.A.N. meshing protocol; - Ceph Core library; - IPv6 networking; - Multipath TCP; - Netfilter; - SCTP protocol; - SMC sockets; - TIPC protocol; (CVE-2021-47378, CVE-2026-23392, CVE-2026-31405, CVE-2026-31414, CVE-2026-31448, CVE-2026-31657, CVE-2026-31668, CVE-2026-43071, CVE-2026-43198, CVE-2026-43493, CVE-2026-43499, CVE-2026-46266, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-52955, CVE-2026-52958, CVE-2026-52982, CVE-2026-52986, CVE-2026-52989, CVE-2026-52993, CVE-2026-52999, CVE-2026-53002, CVE-2026-53006, CVE-2026-53045, CVE-2026-53088, CVE-2026-53176, CVE-2026-53212, CVE-2026-53228, CVE-2026-53359)

CSIRTS triage

What: Multiple vulnerabilities in the Linux kernel including improper handling of WiFi mesh network frames and flaws across numerous subsystems.
Who is affected: Systems running Linux kernel versions affected by CVE-2025-27558 and related CVEs across x86, networking, storage, and file system components.
Urgency: Multiple kernel vulnerabilities spanning critical subsystems including network packet injection require immediate patching to prevent exploitation.
Action: Update the Linux kernel on Azure-managed systems using the provided USN-8666-2 patch.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-31657

Get an email if CVE-2026-31657 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.

Advisory coverage (23)

unknownUSN-8666-2: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-08-25
unknownUSN-8667-1: Linux kernel (KVM) vulnerabilitiesubuntu · 2026-08-21
unknownUSN-8666-1: Linux kernel vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8645-1: Linux kernel (Oracle) vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8633-2: Linux kernel vulnerabilitiesubuntu · 2026-08-13
unknownUSN-8635-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-08-12
unknownUSN-8633-1: Linux kernel vulnerabilitiesubuntu · 2026-08-12
highUSN-8619-1: Linux kernel (HWE) vulnerabilitiesubuntu · 2026-07-28
unknownUSN-8547-2: Linux kernel (Azure FIPS) vulnerabilitiesubuntu · 2026-07-28
highUSN-8609-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu · 2026-07-24
highUSN-8607-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu · 2026-07-24
highUSN-8606-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8605-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8604-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8490-2: Linux kernel (Real-time) vulnerabilitiesubuntu · 2026-07-17
unknownUSN-8490-1: Linux kernel vulnerabilitiesubuntu · 2026-07-17
unknownUSN-8547-1: Linux kernel vulnerabilitiesubuntu · 2026-07-15
unknownUSN-8546-1: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu · 2026-07-15
unknownUSN-8545-1: Linux kernel (HWE) vulnerabilitiesubuntu · 2026-07-15
unknownexploitedUSN-8528-1: Linux kernel (Xilinx ZynqMP) vulnerabilitiesubuntu · 2026-07-10
unknownUSN-8527-1: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu · 2026-07-10
unknownUSN-8492-5: Linux kernel (FIPS) vulnerabilitiesubuntu · 2026-07-10
unknownUSN-8492-4: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu · 2026-07-09

External references

NVD record for CVE-2026-31657

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-31657 status](https://www.csirts.com/badge/CVE-2026-31657)](https://www.csirts.com/cve/CVE-2026-31657)