Network Packet Manipulation Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-31685

What is CVE-2026-31685?

A vulnerability in the Linux Kernel allows for improper handling of network packets due to an inadequate guard against invalid MAC headers. When processing packets, specifically in the eui64_mt6() function, the system fails to reject packets with incorrect MAC headers in some cases. This could lead to unauthorized access or manipulation of network data, as it allows packets with invalid MAC headers to reach the Ethernet header despite being malformed. The vulnerability has since been addressed by revising the logic to ensure such packets are properly rejected, reinforcing overall network security.

References