Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2026-31417— net/x25: Fix overflow when accumulating packets

CVSS 7.5 · High EPSS 0.07% · P22

Possible ATT&CK Techniques 1AI

T1496 · Resource Hijacking

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 96fc16370b0bceb289c7e0479bd0540b81e257aaaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 798d613afb64b01a203f448fb0f43c37c6afe79daffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 6e568835ea54a3e1d08e310e34f95d434e739477affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 1734bd85c5e0a7a801295b729efb56b009cb8fc3affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 4e2d1bcef78d21247fe8fef13bc7ed95885df2b5affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 8c92969c197b91c134be27dc3afb64ab468853a9affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< f953f11ccf4afe6feb635c08145f4240d9a6b544affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< a1822cb524e89b4cd2cf0b82e484a2335496a6d9affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-31417

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net/x25: Fix overflow when accumulating packets
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25_sock.fraglen` does not overflow. The `fraglen` also needs to be resetted when purging `fragment_queue` in `x25_clear_queues()`.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于x25_sock.fraglen累积时可能溢出，可能导致数据包处理错误。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ~ 96fc16370b0bceb289c7e0479bd0540b81e257aa -
LinuxLinux 2.6.12 -

II. Public POCs for CVE-2026-31417

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31417

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-13 · 15 CVEs total

CVE-2026-314149.8 CRITICALnetfilter: nf_conntrack_expect: use expect->helper
CVE-2026-314197.8 HIGHnet: bonding: fix use-after-free in bond_xmit_broadcast()
CVE-2026-314267.0 HIGHACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
CVE-2026-31428netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
CVE-2026-31427netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
CVE-2026-31425rds: ib: reject FRMR registration before IB connection is established
CVE-2026-31424netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
CVE-2026-31423net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
CVE-2026-31422net/sched: cls_flow: fix NULL pointer dereference on shared blocks
CVE-2026-31420bridge: mrp: reject zero test interval to avoid OOM panic
CVE-2026-31421net/sched: cls_fw: fix NULL pointer dereference on shared blocks
CVE-2026-31418netfilter: ipset: drop logically empty buckets in mtype_del
CVE-2026-31416netfilter: nfnetlink_log: account for netlink header size
CVE-2026-31415ipv6: avoid overflows in ip6_datagram_send_ctl()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31417

No comments yet

Leave a comment