PT-2026-35145 · Linux+1 · Linux Kernel+1

Published 2026-04-25 · Updated 2026-06-09 · CVE-2026-31685

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter component where the eui64 mt6() function derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The system failed to reject invalid MAC headers for packets where the par->fragoff variable was equal to 0, allowing the function to access eth hdr(skb) despite the invalid header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALSA-2026:21556

ALSA-2026:21557

ALSA-2026:21706

ALSA-2026:21745

CVE-2026-31685

ECHO-EE3B-CF56-ABED

OESA-2026-2581

RHSA-2026:21556

RHSA-2026:21557

RHSA-2026:21706

RHSA-2026:21745

SUSE-SU-2026:2317-1

Affected Products

Linux Kernel

Rocky Linux

References · 223

• https://nvd.nist.gov/vuln/detail/CVE-2025-23145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31398 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31628 · Security Note
• https://git.kernel.org/stable/c/288138418bef956f8b295751a4536c60f0e89f4a · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31429 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31771 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23244 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31773 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43036 · Security Note
• https://errata.rockylinux.org/RLSA-2026:21706 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71112 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43040 · Security Note
• https://osv.dev/vulnerability/ALSA-2026:21745 · Vendor Advisory