Linux Kernel Vulnerability in Netfilter Affects Data Handling

CVE-2026-31428

What is CVE-2026-31428?

A vulnerability in the Linux kernel's netfilter component presents potential data leakage risks due to uninitialized padding in NFULA_PAYLOAD. The affected function, __build_packet_message(), bypasses standard helpers, leading to the exposure of stale heap contents through the NFLOG netlink socket. This flaw has been mitigated by replacing manual packet construction with functions that ensure proper data initialization and padding, thus safeguarding against unintended data disclosure.

References