Linux Kernel Vulnerability in Nexthop Object Management

CVE-2026-31531

What is CVE-2026-31531?

A vulnerability in the Linux kernel's nexthop management process can cause improper handling of network messages when querying large nexthop groups. The current fixed-size buffer allocation is inadequate for scenarios involving extensive equal-cost multipath configurations, resulting in warnings and potential resource exhaustion. The issue arises specifically with the RTM_GETNEXTHOP requests, where improvements in dynamic buffer allocation are required to rectify the limitations and enhance stability in network operations.

References