CVE-2026-31416: netfilter: nfnetlink_log: account for netlink header size
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlinklog: account for netlink header size
This is a followup to an old bug fix: NLMSGDONE needs to account for the netlink header size, not just the attribute size.
This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31416?
CVE-2026-31416 is rated as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2026-31416?
To fix CVE-2026-31416, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What are the risks associated with CVE-2026-31416?
The risks associated with CVE-2026-31416 include potential data corruption and stability issues due to improper handling of netlink headers.
Is CVE-2026-31416 exploitable remotely?
CVE-2026-31416 is not inherently remote exploitable as it requires local access to the affected system.
Which versions of the Linux kernel are affected by CVE-2026-31416?
CVE-2026-31416 affects certain versions of the Linux kernel prior to the application of the fix that addresses this vulnerability.