Linux Kernel Vulnerability in PFKey Migration Functions

CVE-2026-31515

What is CVE-2026-31515?

A vulnerability exists within the Linux kernel's PFKey migration functions where the handling of family validation in 'pfkey_send_migrate()' is inadequate. This flaw may result in the truncation of the 'family' argument in 'set_ipsecrequest()', potentially causing a buffer overflow during packet processing. Early validation of family parameters is required to mitigate the risk of overflow and possible crashes within the kernel.

References