CVE-2026-31416

Published: Apr 13, 2026Modified: Oct 15, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.

Affected (17)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	3.10.61 ≤ version < 3.11
Linux Linux Kernel	3.12.34 ≤ version < 3.13
Linux Linux Kernel	3.14.25 ≤ version < 3.15
Linux Linux Kernel	3.18 ≤ version < 5.10.253
Linux Linux Kernel	5.11 ≤ version < 5.15.203
Linux Linux Kernel	5.16 ≤ version < 6.1.168
Linux Linux Kernel	6.13 ≤ version < 6.18.22
Linux Linux Kernel	6.19 ≤ version < 6.19.12
Linux Linux Kernel	6.2 ≤ version < 6.6.134
Linux Linux Kernel	6.7 ≤ version < 6.12.81
Linux Linux Kernel	Version 7.0 rc1
Linux Linux Kernel	Version 7.0 rc2
Linux Linux Kernel	Version 7.0 rc3
Linux Linux Kernel	Version 7.0 rc4
Linux Linux Kernel	Version 7.0 rc5
Linux Linux Kernel	Version 7.0 rc6
Linux Linux Kernel	Version 7.0 rc7