PT-2026-35014 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-06-05 · CVE-2026-31662

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The GRP ACK MSG handler in the tipc group proto rcv() function decrements the bc ackers variable on every inbound group ACK, including duplicate ACKs from members who have already acknowledged the current broadcast round. Since bc ackers is a u16 (an unsigned 16-bit integer), a duplicate ACK received after the final legitimate ACK causes the counter to underflow and wrap to 65535. This leads the tipc group bc cong() function to continuously report congestion, resulting in subsequent group broadcasts on the affected socket remaining blocked until the group is recreated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2026-31662

ECHO-0487-EA60-2292

OESA-2026-2580

Affected Products

Linux Kernel

References · 81

• https://nvd.nist.gov/vuln/detail/CVE-2026-31466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54285 · Security Note
• https://git.kernel.org/stable/c/a2ea1ef0167d7a84730638d05c20ccdc421b14b6 · Patch
• https://git.kernel.org/stable/c/575faea557f1a184a5f09661bd47ebd3ef3769f8 · Patch
• https://git.kernel.org/stable/c/1b6f13f626665cac67ba5a012765427680518711 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43475 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31778 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43328 · Security Note
• https://git.kernel.org/stable/c/3bcf7aca63f0bcd679ae28e9b99823c608e59ce3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23107 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43427 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31678 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31712 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45984 · Security Note