Denial of Service Vulnerability in Linux Kernel IPv6 Component

CVE-2026-31415

What is CVE-2026-31415?

A vulnerability in the Linux kernel's IPv6 component can lead to a denial of service condition. This flaw arises from a mismatch between a 16-bit length accumulator and a pointer to the destination-options header when multiple IPV6_DSTOPTS control messages are processed. The lack of duplicate rejection for these messages allows for an overflow in the length accumulator, potentially causing the kernel to panic, leading to a system crash. Users with appropriate capabilities can exploit this vulnerability, creating a local denial of service, especially under specific namespace configurations.

References