Linux Kernel Vulnerability in Netfilter Affecting IP6T Routing Rules

CVE-2026-31674

What is CVE-2026-31674?

A vulnerability in the Linux kernel's netfilter component allows for incorrect validation of address numbers in routing match rules. Specifically, the function responsible for validating these rules, rt_mt6_check(), fails to reject oversized addrnr fields, potentially leading to out-of-bounds access and manipulation of match logic. This issue emphasizes the importance of rigorous input validation during rule installation, ensuring that malformed rules are caught before they are processed, thereby maintaining system security.

References