CVE-2026-31416

Source
https://cve.org/CVERecord?id=CVE-2026-31416
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31416.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-31416
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
MGASA (2)
OESA (3)
openSUSE (1)
ROOT (5)
SUSE (11)
UBUNTU (1)
Related
Published
2026-04-13T13:21:03Z
Modified
2026-10-16T02:31:03Z
Summary
netfilter: nfnetlink_log: account for netlink header size
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: account for netlink header size

This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size.

This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31416.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9dfa1dfe4d5e5e66a991321ab08afe69759d797a
Fixed
4ec216410fac9de83c99177a160ebb8d42fad075
Fixed
09883bf257f4243ed5a1fd35078ec6f0d0f3696a
Fixed
761b45c661af48da6a065868d59ab1e1f64fd9b6
Fixed
607245c4dbb86d9a10dd8388da0fb82170a99b61
Fixed
6b419700e459fbf707ca1543b7c1b57a60fedb73
Fixed
88a8f56e6276f616baad4274c6b8e4683e26e520
Fixed
f08ffa3e1c8e36b6131f69c5eb23700c28cbd262
Fixed
6d52a4a0520a6696bdde51caa11f2d6821cd0c01
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.10.61
Fixed
3.11
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.12.34
Fixed
3.13
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.14.25
Fixed
3.15
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.17.4
Fixed
3.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3a758a2b78da2f49f7165678faf999e946a0c4b5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
131172845aa2c804ffa9423455aee585061ea35e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b1fef6b81871a396f3b8702077333e769673c87b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
add9183d993c12fb61ce0a674a424341d5be5b36

Affected versions

v3.*
v3.10.100
v3.10.101
v3.10.102
v3.10.103
v3.10.104
v3.10.105
v3.10.106
v3.10.107
v3.10.108
v3.10.61
v3.10.62
v3.10.63
v3.10.64
v3.10.65
v3.10.66
v3.10.67
v3.10.68
v3.10.69
v3.10.70
v3.10.71
v3.10.72
v3.10.73
v3.10.74
v3.10.75
v3.10.76
v3.10.77
v3.10.78
v3.10.79
v3.10.80
v3.10.81
v3.10.82
v3.10.83
v3.10.84
v3.10.85
v3.10.86
v3.10.87
v3.10.88
v3.10.89
v3.10.90
v3.10.91
v3.10.92
v3.10.93
v3.10.94
v3.10.95
v3.10.96
v3.10.97
v3.10.98
v3.10.99
v3.12.34
v3.12.35
v3.12.36
v3.12.37
v3.12.38
v3.12.39
v3.12.40
v3.12.41
v3.12.42
v3.12.43
v3.12.44
v3.12.45
v3.12.46
v3.12.47
v3.12.48
v3.12.49
v3.12.50
v3.12.51
v3.12.52
v3.12.53
v3.12.54
v3.12.55
v3.12.56
v3.12.57
v3.12.58
v3.12.59
v3.12.60
v3.12.61
v3.12.62
v3.12.63
v3.12.64
v3.12.65
v3.12.66
v3.12.67
v3.12.68
v3.12.69
v3.12.70
v3.12.71
v3.12.72
v3.12.73
v3.12.74
v3.14.25
v3.14.26
v3.14.27
v3.14.28
v3.14.29
v3.14.30
v3.14.31
v3.14.32
v3.14.33
v3.14.34
v3.14.35
v3.14.36
v3.14.37
v3.14.38
v3.14.39
v3.14.40
v3.14.41
v3.14.42
v3.14.43
v3.14.44
v3.14.45
v3.14.46
v3.14.47
v3.14.48
v3.14.49
v3.14.50
v3.14.51
v3.14.52
v3.14.53
v3.14.54
v3.14.55
v3.14.56
v3.14.57
v3.14.58
v3.14.59
v3.14.60
v3.14.61
v3.14.62
v3.14.63
v3.14.64
v3.14.65
v3.14.66
v3.14.67
v3.14.68
v3.14.69
v3.14.70
v3.14.71
v3.14.72
v3.14.73
v3.14.74
v3.14.75
v3.14.76
v3.14.77
v3.14.78
v3.14.79
v3.17.4
v3.17.5
v3.17.6
v3.17.7
v3.17.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31416.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.18.0
Fixed
5.10.253
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.168
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.134
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.81
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.22
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31416.json"