CVE-2026-31412
medium
Red Hat EPSS Score
0.0%
Exploitation probability in 30 days
Top 99% most likely to be exploited
Published: April 10, 2026 (34 days ago)
Last Modified: April 10, 2026
Vendor: Red Hat
Source: REDHAT
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's USB mass storage gadget module (`usb-gadget-f_mass_storage`). A remote attacker, acting as a malicious USB host, could send a specially crafted SCSI READ or WRITE command. This action could trigger an integer overflow during data size calculation, leading to an incorrect size. This issue may bypass boundary checks, potentially resulting in memory corruption or out-of-bounds memory access.
CWE
CWE-1335Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9