PT-2026-34422 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-31517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm iptfs component during the reassembly of inner packets. In the iptfs reassem cont() function, the system attempts to append data to a packet. If a zero-copy approach is initially successful, the packet becomes non-linear. When a subsequent fragment fails to meet fast-path conditions, a memory copy is performed using the skb put() function. Because the packet is non-linear, this triggers an SKB LINEAR ASSERT check, leading to a system panic (invalid opcode).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-31517

Affected Products

Linux Kernel

References · 12

• https://security-tracker.debian.org/tracker/CVE-2026-31517 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31517 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31517 · Vendor Advisory
• https://git.kernel.org/stable/c/33a7b36268933c75bdc355e5531951e0ea9f1951 · Patch
• https://git.kernel.org/stable/c/7fdfe8f6efeb0e1200e22a903f2471539f54522b · Patch
• https://git.kernel.org/stable/c/0b352f83cabfefdaafa806d6471f0eca117dc7d5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31517 · Security Note
• https://ubuntu.com/security/CVE-2026-31517 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31517 · Vendor Advisory
• https://git.kernel.org/linus/0b352f83cabfefdaafa806d6471f0eca117dc7d5 · Note
• https://twitter.com/CVEnew/status/2046979953879654890 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2047048023599960401 · Twitter Post