PT-2026-35134 · Linux · Linux Kernel

Published 2026-04-25 · Updated 2026-05-26 · CVE-2026-31674

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter component where the rt mt6 check() function fails to properly validate the addrnr value during the installation of rt match rules. This allows rules with an addrnr exceeding IP6T RT HOPS to be processed, which can lead to out-of-range values being used when accessing the rtinfo->addrs[] array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31674

ECHO-E0A0-F580-C335

OESA-2026-2310

OESA-2026-2311

OESA-2026-2312

OESA-2026-2313

OESA-2026-2314

Affected Products

Linux Kernel

References · 79

• https://nvd.nist.gov/vuln/detail/CVE-2026-43124 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31674 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43020 · Security Note
• https://git.kernel.org/stable/c/13e3e30ed3b5b67cc1db2bd58a5d09b0f07debfa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43265 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31486 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31682 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31592 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43214 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31560 · Security Note