CVE-2026-31671: xfrm_user: fix info leak in build_report()
In the Linux kernel, the following vulnerability has been resolved:
xfrmuser: fix info leak in buildreport()
struct xfrmuserreport is a u8 proto field followed by a struct xfrmselector which means there is three "empty" bytes of padding, but the padding is never zeroed before copying to userspace. Fix that up by zeroing the structure before setting individual member variables.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31671?
CVE-2026-31671 has a severity rating that indicates it can lead to information leakage in the Linux kernel.
How do I fix CVE-2026-31671?
To fix CVE-2026-31671, update to the patched version of the Linux kernel that addresses this vulnerability.
What is the impact of CVE-2026-31671?
The impact of CVE-2026-31671 is that it may allow unauthorized access to sensitive information due to an information leak.
Which Linux kernel versions are affected by CVE-2026-31671?
CVE-2026-31671 affects certain versions of the Linux kernel; refer to the official advisory for a complete list.
Is CVE-2026-31671 being actively exploited?
As of now, there is no public indication that CVE-2026-31671 is being actively exploited in the wild.