What is the CVSS score of EUVD-2026-70353?

EUVD-2026-70353 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-70353?

A memory access vulnerability in Linux kernel display drivers could allow low-privileged local users to leak sensitive kernel memory or crash systems, affecting infrastructure reliant on display…. A patch is available.

How to fix or mitigate EUVD-2026-70353?

Within 24 hours, identify all Linux systems running affected kernel versions using automated asset discovery and flag those with local user access or display hardware. Within 7 days, deploy the available vendor patch to non-production systems to validate compatibility and stability. Within 30 days, complete production rollout of patched kernels through maintenance windows, prioritizing systems supporting untrusted local access or critical display-dependent services.

Linux Kernel EUVD-2026-70353

| CVE-2026-80749 HIGH

2026-09-03 Linux

GHSA-4qvv-f8j2-942j

Denial Of Service Information Disclosure Linux Suse

7.1

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

vuln.today AI

6.1 MEDIUM

OOB read is fixed-size (32 bytes) and heap-layout-dependent, justifying C:L; A:H retained for credible page-fault kernel crash.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

4.4 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Metadata Corrected

Sep 04, 2026 - 05:40 vuln.today

tag: Denial Of Service added

Analysis Generated

Sep 04, 2026 - 05:30 vuln.today

CVSS changed

Sep 04, 2026 - 05:22 NVD

7.1 (HIGH)

Patch available

Sep 03, 2026 - 10:16 EUVD

CVE Published

Sep 03, 2026 - 08:26 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 03, 2026 - 08:26 cve.org

HIGH 7.1

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/connector/hdmi: Fix out of bounds memory read

A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination (a generic target, sized to accept many different data blocks) not the source (a very specific type of data block). Thus, it was copying 60 bytes of data from a 28 byte allocation.

Fix that by using the source size instead, together with a build bug on the source size actually being smaller than the destination.

I hit this running KUnit tests under KASAN (while debugging something else entirely). In the real world, it seems unlikely to cause an actual problem. It is a read not a write so it can't corrupt any memory. However, it could potentially fall off the end of a page and cause an accvio bug.

AnalysisAI

Out-of-bounds memory read in the Linux kernel's DRM HDMI connector subsystem allows a local, low-privileged user to potentially leak up to 32 bytes of adjacent kernel heap memory or trigger a page fault leading to kernel crash. The flaw exists in a helper function that copies audio infoframe data using the destination buffer size (60 bytes) rather than the source structure size (28 bytes), reading 32 bytes beyond the source allocation. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires local, low-privilege access to a Linux system running a kernel between the introduction of f378b77227bc and the applicable fix commit. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is meaningfully lower than the 7.1 CVSS score suggests. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary fix is to upgrade to a patched Linux kernel version: 6.12.105, 6.18.46, 7.1.10, or mainline 7.2. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all Linux systems running affected kernel versions using automated asset discovery and flag those with local user access or display hardware. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

EUVD-2026-70353 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-70353

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code