Linearization Issue in Linux Kernel's IP-TFS Handling
CVE-2026-31517
What is CVE-2026-31517?
A vulnerability exists in the Linux kernel's IP-TFS handling where the system may experience a panic due to improper handling of non-linear socket buffers during packet reassembly. When a zero-copy method fails, the attempt to append data can lead to invoking skb_put on a non-linear socket buffer, causing an SKB_LINEAR_ASSERT failure. This can result in system instability, necessitating a check for non-linearity and appropriate linearization to ensure smooth reassembly of packets.
Affected Version(s)
Linux 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 < 33a7b36268933c75bdc355e5531951e0ea9f1951
Linux 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 < 7fdfe8f6efeb0e1200e22a903f2471539f54522b
Linux 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 < 0b352f83cabfefdaafa806d6471f0eca117dc7d5