PT-2026-35139 · Unknown+1 · Openvswitch+1

Published 2026-04-25 · Updated 2026-05-26 · CVE-2026-31679

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In openvswitch, the validate set() function accepted OVS KEY ATTR MPLS as a variable-sized payload for SET and SET MASKED actions. However, action handling expects fixed-size MPLS key data (struct ovs key mpls). This discrepancy allows for invalid MPLS action payload lengths to be processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31679

ECHO-1CA3-B91B-0F18

OESA-2026-2311

Affected Products

Linux Kernel

Openvswitch

References · 55

• https://nvd.nist.gov/vuln/detail/CVE-2026-43124 · Security Note
• https://git.kernel.org/stable/c/98de18d327ef8cbbb704980e359e4872d8c28997 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43284 · Security Note
• https://git.kernel.org/stable/c/8ed7b9930cbc3bc71f868fa79a68700ac88d586a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31773 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43020 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31476 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31679 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31698 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31521 · Security Note