PT-2026-32350 · Linux · Linux Kernel

Weiming Shi · Published 2026-04-13 · Updated 2026-05-09 · CVE-2026-31424

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the netfilter x tables component where xt match and xt target structures registered with NFPROTO UNSPEC can be loaded by any protocol family via nft compat. When these structures use a bitmask with NF INET * constants to restrict hooks, the validation incorrectly passes for the ARP protocol because NF ARP OUT shares the same value as NF INET LOCAL IN. This allows matches to execute on ARP chains where expected hook assumptions are not met, potentially leading to NULL pointer dereferences, as seen in the devgroup mt() function.

Recommendations Restrict arptables to use only NFPROTO ARP extensions. As a temporary workaround, restrict the use of xt devgroup in ARP chains until the update is applied.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31424

ECHO-8951-82F1-8D3A

OESA-2026-2232

OESA-2026-2235

OESA-2026-2236

Affected Products

Linux Kernel

References · 35

• https://nvd.nist.gov/vuln/detail/CVE-2025-71089 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31782 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23442 · Security Note
• https://git.kernel.org/stable/c/dc3e27dd7d76e21106b8f9bbdc31f5da74a89014 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31424 · Vendor Advisory
• https://git.kernel.org/stable/c/3e79374b03bf9a2f282f0eb1d0ac3776f7e0f28a · Patch
• https://git.kernel.org/stable/c/e7e1b6bcb389c8708003d40613a59ff2496f6b1f · Patch
• https://git.kernel.org/stable/c/1cd6313c8644bfebbd813a05da9daa21b09dd68c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31602 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31424 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31424 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31424 · Vendor Advisory
• https://git.kernel.org/stable/c/f00ac65c90ea475719e08d629e2e26c8b4e6999b · Patch