PT-2026-34422 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31517

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm iptfs component during the reassembly of inner packets. In the iptfs reassem cont() function, the system attempts to append data to a packet. If a zero-copy approach is initially successful, the packet becomes non-linear. When a subsequent fragment fails to meet fast-path conditions, a memory copy is performed using the skb put() function. Because the packet is non-linear, this triggers an SKB LINEAR ASSERT check, leading to a system panic (invalid opcode).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31517

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-31517 · Security Note
• https://twitter.com/CVEnew/status/2046979953879654890 · Twitter Post
• https://git.kernel.org/stable/c/33a7b36268933c75bdc355e5531951e0ea9f1951 · Note
• https://git.kernel.org/stable/c/0b352f83cabfefdaafa806d6471f0eca117dc7d5 · Note
• https://twitter.com/VulmonFeeds/status/2047048023599960401 · Twitter Post
• https://git.kernel.org/stable/c/7fdfe8f6efeb0e1200e22a903f2471539f54522b · Note