PT-2026-32340 · Linux · Linux Kernel

Published 2026-04-13 · Updated 2026-05-20 · CVE-2026-31414

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter component within the nf conntrack expect function. Using nfct help() without holding a reference to the master conntrack is unsafe. To maintain existing behavior, the ctnetlink path should use exp->master->helper when userspace does not provide an explicit helper during expectation creation. The ctnetlink expectation path maintains the reference on the master conntrack and the nf conntrack expect lock, while the nfnetlink glue path refers to the master ct attached to the skb.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31414

ECHO-2B8D-3B31-1285

Affected Products

Linux Kernel

References · 19

• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-31414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31414 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31414 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31414 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31414 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31414 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31414 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31414 · Vendor Advisory
• https://git.kernel.org/stable/c/4bd1b3d839172724b33d8d02c5a4ff6a1c775417 · Patch
• https://git.kernel.org/stable/c/3dfd3f7712b5a800f2ba632179e9b738076a51f0 · Patch
• https://git.kernel.org/stable/c/b53294bff19e56ada2f230ceb8b1ffde61cc3817 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31414 · Vendor Advisory
• https://git.kernel.org/stable/c/f01794106042ee27e54af6fdf5b319a2fe3df94d · Patch
• https://git.kernel.org/stable/c/847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781 · Patch
• https://git.kernel.org/stable/c/e7ccaa0a62a8ff2be5d521299ce79390c318d306 · Patch