CVE-2026-31685
Published: Apr 25, 2026
Modified: Jun 1, 2026
CVSS v3.1
9.4
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 4d75bc2cd093bf5803edf512c099bfb220fd6459affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 7d6a57411caf54df025860c9b1a82cd42d57a562affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < d5603591373441fecf9951833d6d873e09320f08affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 288138418bef956f8b295751a4536c60f0e89f4aaffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 9eda5478746ef7dc0e4e537b5a5e4b0ca1027091+3 more versions |
Linux | Linux | affected 2.6.12unaffected 0 - < 2.6.12unaffected 5.10.258 - <= 5.10.*unaffected 5.15.209 - <= 5.15.*unaffected 6.1.175 - <= 6.1.*+5 more versions |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now