Out-of-Bounds Access Vulnerability in Linux Kernel Affecting Netfilter

CVE-2026-31407

What is CVE-2026-31407?

In the Linux kernel, an out-of-bounds access vulnerability exists within the netfilter subsystem. Specifically, parameters utilized by the kernel were subjected to insufficient validation, which could lead to unauthorized access beyond the intended memory boundaries. Affected functions in the sctp and ctnetlink modules fail to validate user-supplied attributes properly, risking access to memory regions outside of the designated limits. Proper netlink policy enforcement is essential to prevent potential exploitation of this vulnerability, as direct assignment of user inputs to kernel space memory without validation can result in severe stability and security implications.

References