Riskcovery

CVE-2026-31416

netfilter: nfnetlink_log: account for netlink header size

State
Published
Severity
Not scored
Published
Apr 13, 2026
Updated
Oct 15, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: account for netlink header size

This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size.

This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 4ec216410fac9de83c99177a160ebb8d42fad075Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 09883bf257f4243ed5a1fd35078ec6f0d0f3696aAffected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 761b45c661af48da6a065868d59ab1e1f64fd9b6Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 607245c4dbb86d9a10dd8388da0fb82170a99b61Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 6b419700e459fbf707ca1543b7c1b57a60fedb73Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 88a8f56e6276f616baad4274c6b8e4683e26e520Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before f08ffa3e1c8e36b6131f69c5eb23700c28cbd262Affected
  • 9dfa1dfe4d5e5e66a991321ab08afe69759d797a to before 6d52a4a0520a6696bdde51caa11f2d6821cd0c01Affected
  • 3a758a2b78da2f49f7165678faf999e946a0c4b5Affected
  • 131172845aa2c804ffa9423455aee585061ea35eAffected
  • b1fef6b81871a396f3b8702077333e769673c87bAffected
  • add9183d993c12fb61ce0a674a424341d5be5b36Affected
  • 3.10.61 to before 3.11Affected
  • 3.12.34 to before 3.13Affected
  • 3.14.25 to before 3.15Affected
  • 3.17.4 to before 3.18Affected
LinuxLinux
  • 3.18Affected
  • before 3.18Not affected
  • 5.10.253 through 5.10.*Not affected
  • 5.15.203 through 5.15.*Not affected
  • 6.1.168 through 6.1.*Not affected
  • 6.6.134 through 6.6.*Not affected
  • 6.12.81 through 6.12.*Not affected
  • 6.18.22 through 6.18.*Not affected
  • 6.19.12 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.