Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31649

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The jumbo_frm() chain-mode implementation unconditionally computes len = nopaged_len - bmax; where nopaged_len = skb_headlen(skb) (linear bytes only) and bmax is BUF_SIZE_8KiB or BUF_SIZE_2KiB. However, the caller stmmac_xmit() decides to invoke jumbo_frm() based on skb->len (total length including page fragments): is_jumbo = stmmac_is_jumbo_frm(priv, skb->len, enh_d
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e7f5fbbbcd808554f500692b1ee0cd08f9f1782b3a66a982ae764eb87ac576a0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 12 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/stmicro/stmmac/chain_mode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"513e06735f5be575b409d195822195348b164e48","status":"affected","version":"286a837217204b1ef105e3a554d0757e4fdfaac1","versionType":"git"},{"lessThan":"275bdf762e82082f064e60a92448fa2ac43cf95b","status":"affected","version":"286a837217204b1ef105e3a554d0757e4fdfaac1","versionType":"git"},{"lessThan":"a2b68a9a476b9544ff31f1fbcd5d80867a8a5e2f","status":"affected","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/3

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/9

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/6

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/2

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/4

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/stmicro/stmmac/chain_mode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/8

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/5

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/7

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/1

Affected products and versions

12 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/stmicro/stmmac/chain_mode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"513e06735f5be575b409d195822195348b164e48","status":"affected","version":"286a837217204b1ef105e3a554d0757e4fdfaac1","versionType":"git"},{"lessThan":"275bdf762e82082f064e60a92448fa2ac43cf95b","status":"affected","version":"286a837217204b1ef105e3a554d0757e4fdfaac1","versionType":"git"},{"lessThan":"a2b68a9a476b9544ff31f1fbcd5d80867a8a5e2f","status":"affected","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/3
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/9
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/6
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/2
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/4
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/stmicro/stmmac/chain_mode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/8
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/5
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/7
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/metrics/0/cvssV3_1

Source references

10 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/references/1
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/adp/0/references/0
{"url":"https://git.kernel.org/stable/c/10d12b9240ebf96c785f0e2e4228318cd5f3a3eb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/275bdf762e82082f064e60a92448fa2ac43cf95b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/2c91b39912278d0878f9ba60ba04d2518b18a08d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/513e06735f5be575b409d195822195348b164e48"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/51f4e090b9f87b40c21b6daadb5c06e6c0a07b67"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/6fca757c20396dc2e604dcc61922264e9e3dc803"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a2b68a9a476b9544ff31f1fbcd5d80867a8a5e2f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b7b8012193fd98236d7ae05d4b553f010a77b2ef"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1a4fc662fb59659f0c7822abeb31f288a28d111088dca2ac36a465d65e3a23d4 · sha256:d523d2af3f067553… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer