PT-2026-34982 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-15 · CVE-2026-31630

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the AF RXRPC procfs helpers, local and remote socket addresses are formatted into fixed 50-byte stack buffers using the %pISpc formatter. This buffer size is insufficient for the longest possible IPv6-with-port strings, such as those involving ISATAP addresses (Intra-Site Automatic Tunnel Addressing, a mechanism for connecting IPv6 hosts over IPv4 networks). Specifically, certain address formats can produce 50 visible characters, requiring 51 bytes including the null terminator, which leads to a buffer overflow in net/rxrpc/proc.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31630

OESA-2026-2310

OESA-2026-2311

Affected Products

Linux Kernel

References · 48

• https://nvd.nist.gov/vuln/detail/CVE-2026-31699 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43079 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31630 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31592 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31441 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2310 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31630 · Vendor Advisory
• https://git.kernel.org/stable/c/a44ce6aa2efb61fe44f2cfab72bb01544bbca272 · Patch
• https://git.kernel.org/stable/c/db297c78ce537c9ac96f0eda9b25ad72c8caefa9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31476 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31630 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2311 · Vendor Advisory