PT-2026-35145 · Linux · Linux

Published 2026-04-25 · Updated 2026-04-25 · CVE-2026-31685

Mitre

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ip6t eui64: reject invalid MAC header for all packets

eui64 mt6() derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address.

The existing guard only rejects an invalid MAC header when par->fragoff != 0. For packets with par->fragoff == 0, eui64 mt6() can still reach eth hdr(skb) even when the MAC header is not valid.

Fix this by removing the par->fragoff != 0 condition so that packets with an invalid MAC header are rejected before accessing eth hdr(skb).

Related Identifiers

CVE-2026-31685

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-31685 · Security Note
• https://git.kernel.org/stable/c/fdce0b3590f724540795b874b4c8850c90e6b0a8 · Note
• https://git.kernel.org/stable/c/9eda5478746ef7dc0e4e537b5a5e4b0ca1027091 · Note
• https://git.kernel.org/stable/c/807d6ee15804df6f01a35c910f09612e858739a6 · Note
• https://git.kernel.org/stable/c/309ae3e9a51a69699ca94eac5fac5688fa562d55 · Note