CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel()

Q: What is the severity of CVE-2026-31570?

CVE-2026-31570 is classified as a medium severity vulnerability due to its potential for out-of-bounds heap access.

Q: How do I fix CVE-2026-31570?

To mitigate CVE-2026-31570, upgrade the Linux kernel to a version that does not contain this vulnerability.

Q: Which Linux kernel versions are affected by CVE-2026-31570?

CVE-2026-31570 affects Linux kernel versions from 5.4.1 up to 6.19 and the 7.0-rc series.

Q: What are the potential impacts of CVE-2026-31570?

Exploitation of CVE-2026-31570 could lead to arbitrary code execution or denial of service due to out-of-bounds memory access.

Q: How can I determine if I am vulnerable to CVE-2026-31570?

You can check your Linux kernel version against the affected versions listed for CVE-2026-31570 to assess vulnerability.

Published Apr 24, 2026

Updated

can: gw: fix OOB heap access in cgwcsumcrc8rel()

Affected Software

19 affected componentsFixes available

Linux Linux kernel<=6.19, =7.0-rc2

Microsoft azl3 kernel 6.6.130.1-3

Patch available

Microsoft azl3 kernel 6.6.130.1-3<6.6.134.1-2

6.6.134.1-2

Linux Linux kernel>=5.4.1<5.10.253

Linux Linux kernel>=5.11<5.15.203

Linux Linux kernel>=5.16<6.1.168

Linux Linux kernel>=6.2<6.6.131

Linux Linux kernel>=6.7<6.12.80

Linux Linux kernel>=6.13<6.18.21

Linux Linux kernel>=6.19<6.19.11

Linux Linux kernel=5.4

Linux Linux kernel=7.0-rc1

Linux Linux kernel=7.0-rc2

Linux Linux kernel=7.0-rc3

Linux Linux kernel=7.0-rc4

Linux Linux kernel=7.0-rc5

Linux Linux kernel=7.0-rc6

Linux Linux kernel=7.0-rc7

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.134.1-2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1

Event History

Apr 24, 2026

CVE Published

via MITRE·02:35 PM

Data Sourced

via MITRE·02:35 PM

DescriptionSeverity

Data Sourced

via NVD·03:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Apr 26, 2026

Data Sourced

via Microsoft·08:03 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2026-31570?

CVE-2026-31570 is classified as a medium severity vulnerability due to its potential for out-of-bounds heap access.

How do I fix CVE-2026-31570?

To mitigate CVE-2026-31570, upgrade the Linux kernel to a version that does not contain this vulnerability.

Which Linux kernel versions are affected by CVE-2026-31570?

CVE-2026-31570 affects Linux kernel versions from 5.4.1 up to 6.19 and the 7.0-rc series.

What are the potential impacts of CVE-2026-31570?

Exploitation of CVE-2026-31570 could lead to arbitrary code execution or denial of service due to out-of-bounds memory access.

How can I determine if I am vulnerable to CVE-2026-31570?

You can check your Linux kernel version against the affected versions listed for CVE-2026-31570 to assess vulnerability.

CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel()

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-31570?

How do I fix CVE-2026-31570?

Which Linux kernel versions are affected by CVE-2026-31570?

What are the potential impacts of CVE-2026-31570?

How can I determine if I am vulnerable to CVE-2026-31570?

Company

Resources

Contact