PT-2026-30573 · Linux · Linux Kernel

Published 2026-04-06 · Updated 2026-04-20 · CVE-2026-31405

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the dvb-net module related to out-of-bounds access in ULE extension header tables. The ule mandatory ext handlers[] and ule optional ext handlers[] tables in the handle one ule extension() function are susceptible to an out-of-bounds read when the htype index, derived from network data (ule sndu type & 0x00FF), equals 255. This occurs because the tables are defined with 255 valid indices (0-254), while the network data can produce a value of 255. Accessing the table with an index of 255 leads to an out-of-bounds read, potentially allowing the execution of arbitrary code. The issue is resolved by adding a bounds check on htype before accessing the tables, causing out-of-range values to discard the SNDU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31405

ECHO-ABE3-6D9C-2871

OESA-2026-1946

OESA-2026-1947

OESA-2026-1948

Affected Products

Linux Kernel

References · 38

• https://nvd.nist.gov/vuln/detail/CVE-2026-23461 · Security Note
• https://git.kernel.org/stable/c/e51238718217c4abdb3ccc3b0c0cde265c7ec629 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31405 · Vendor Advisory
• https://git.kernel.org/stable/c/24d87712727a5017ad142d63940589a36cd25647 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31405 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1946 · Vendor Advisory
• https://git.kernel.org/stable/c/29ef43ceb121d67b87f4cbb08439e4e9e732eff8 · Patch
• https://git.kernel.org/stable/c/8bde543d2a5f935ba2a6a6325a2e02f8a9256fbe · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23440 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1947 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23247 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23389 · Security Note