Buffer Overflow in Linux Kernel's AF_RXRPC Procfs Helpers

CVE-2026-31630

What is CVE-2026-31630?

A vulnerability in the Linux Kernel's AF_RXRPC procfs helpers could lead to a buffer overflow due to insufficiently sized buffers for socket address formatting. The existing stack buffers are fixed at 50 bytes, which are inadequate for the maximum formatted length of IPv6 addresses with ports. This can expose systems to risks when handling certain socket addresses, especially in cases involving ISATAP formatted addresses. The vulnerability has been addressed by resizing the buffers based on the formatter's maximum textual form and updating relevant code calls.

References