PT-2026-35023 · Linux · Linux

Published 2026-04-24 · Updated 2026-04-24 · CVE-2026-31671

Mitre

In the Linux kernel, the following vulnerability has been resolved:

xfrm user: fix info leak in build report()

struct xfrm user report is a u8 proto field followed by a struct xfrm selector which means there is three "empty" bytes of padding, but the padding is never zeroed before copying to userspace. Fix that up by zeroing the structure before setting individual member variables.

Related Identifiers

CVE-2026-31671

Affected Products

Linux

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-31671 · Security Note
• https://git.kernel.org/stable/c/6c55714c931051cd7f4839c19ce0867179fd22fe · Note
• https://git.kernel.org/stable/c/0616314b3b34f24cbb91da8c6bd8bcdc4c8592f9 · Note
• https://git.kernel.org/stable/c/716c546e88cfe49d841658240e10cb57bc50a2cc · Note
• https://git.kernel.org/stable/c/d27c02eec529f78055a46a5c9e6c62684382b2d8 · Note
• https://git.kernel.org/stable/c/0a30dceb0e1f0c480d2482e6d7cebf8aebb6eb72 · Note
• https://twitter.com/VulmonFeeds/status/2047721108355334262 · Twitter Post
• https://twitter.com/CVEnew/status/2047731902602244430 · Twitter Post
• https://git.kernel.org/stable/c/ff5ee507302303b15859753c3e0d67d38fd12c88 · Note
• https://git.kernel.org/stable/c/d10119968d0e1f2b669604baf2a8b5fdb72fa6b4 · Note
• https://git.kernel.org/stable/c/e0c8542c3d097ed4205ded51868195d5d6ddac62 · Note