CVE-2026-31679: openvswitch: validate MPLS set/set_masked payload length
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: validate MPLS set/setmasked payload length
validateset() accepted OVSKEYATTRMPLS as variable-sized payload for SET/SETMASKED actions. In action handling, OVS expects fixed-size MPLS key data (struct ovskeympls).
Use the already normalized keylen (masked case included) and reject non-matching MPLS action key sizes.
Reject invalid MPLS action payload lengths early.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31679?
CVE-2026-31679 has a medium severity rating due to potential exploitation risk affecting Open vSwitch.
What is CVE-2026-31679?
CVE-2026-31679 is a vulnerability in Open vSwitch that involves improper validation of MPLS set/set_masked payload lengths.
How do I fix CVE-2026-31679?
To fix CVE-2026-31679, update your Open vSwitch to the latest version that includes the relevant security patches.
What systems are affected by CVE-2026-31679?
CVE-2026-31679 affects systems running Open vSwitch in the Linux kernel.
What types of attacks can exploit CVE-2026-31679?
Exploitation of CVE-2026-31679 may allow attackers to alter MPLS action handling, potentially leading to denial-of-service conditions.