Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31747

In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer `me4000_xilinx_download()` loads the firmware that was requested by `request_firmware()`. It is possible for it to overrun the source buffer because it blindly trusts the file format. It reads a data stream length from the first 4 bytes into variable `file_length` and reads the data stream contents of length `file_length` from offset 16 onwards. Add a test to ensure t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:39ad9834f78ea2f75de9e0c6aa0cd7e5ac9cc1bd24c717b74a72e4c48a088837
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/comedi/drivers/me4000.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.19"},{"lessThan":"3.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"}…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/comedi/drivers/me4000.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8ddfe6495c245226a30d8b36e2f4a7aa7712e8d6","status":"affected","version":"ac584af599452748187cf6d7865b1607c54ee443","versionType":"git"},{"lessThan":"64b24b713e1a3ea6624480594b4f8c2ff86502f2","status":"affected","version":"ac584af599452748187cf6d7865b1607c54ee443","versionType":"git"},{"lessThan":"f72b5567f7c117b46b4058dc6a0c7554f8565561","status":"affected","version":"ac584af5994527…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/comedi/drivers/me4000.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.19"},{"lessThan":"3.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"}…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/comedi/drivers/me4000.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8ddfe6495c245226a30d8b36e2f4a7aa7712e8d6","status":"affected","version":"ac584af599452748187cf6d7865b1607c54ee443","versionType":"git"},{"lessThan":"64b24b713e1a3ea6624480594b4f8c2ff86502f2","status":"affected","version":"ac584af599452748187cf6d7865b1607c54ee443","versionType":"git"},{"lessThan":"f72b5567f7c117b46b4058dc6a0c7554f8565561","status":"affected","version":"ac584af5994527…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1603dd471f47762e9d1f52304edb3e49a7e62655"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/3fb43a7a5b44713f892c58ead2e5f3a1bc9f4ee7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/64b24b713e1a3ea6624480594b4f8c2ff86502f2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/8ddfe6495c245226a30d8b36e2f4a7aa7712e8d6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/99f31aa98ab6e3805c455b65bcd01b3d48bdf1a5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/de3f923ae7d91480ed3ecea1b1e1fc0dc25b597d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/eae19cab44204537f79146f15a51811b13227c38"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/f72b5567f7c117b46b4058dc6a0c7554f8565561"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4ca976a4bffa68adfdd040af3153ccb4bdd31734b0fdf53b6c0ad7c8e7ebf39 · sha256:05580a9d00e562b0… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer