Netfilter Vulnerability in Linux Kernel Affects Data Handling

CVE-2026-31495

What is CVE-2026-31495?

A data handling vulnerability exists within the netfilter component of the Linux kernel, specifically related to the ctnetlink code paths. This flaw arises from the failure to implement adequate policy range checks for netlink commands, resulting in the acceptance of invalid values that could lead to undefined behavior. The vulnerability impacts important TCP options such as connection tracking states and window scaling factors, which have been rectified through policy annotations that ensure early rejection of invalid values, promoting better data integrity and system security.

References