In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: account for netlink header size

This is a followup to an old bug fix: NLMSG_DONE needs to account
for the netlink header size, not just the attribute size.

This can result in a WARN splat + drop of the netlink message,
but other than this there are no ill effects.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < 761b45c661af48da6a065868d59ab1e1f64fd9b6
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < 607245c4dbb86d9a10dd8388da0fb82170a99b61
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < 6b419700e459fbf707ca1543b7c1b57a60fedb73
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < 88a8f56e6276f616baad4274c6b8e4683e26e520
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < f08ffa3e1c8e36b6131f69c5eb23700c28cbd262
9dfa1dfe4d5e5e66a991321ab08afe69759d797a affected < 6d52a4a0520a6696bdde51caa11f2d6821cd0c01
3a758a2b78da2f49f7165678faf999e946a0c4b5 affected —
131172845aa2c804ffa9423455aee585061ea35e affected —
b1fef6b81871a396f3b8702077333e769673c87b affected —
add9183d993c12fb61ce0a674a424341d5be5b36 affected —
Linux Linux affected
Version Status Constraints
3.18 affected —
0 unaffected < 3.18
6.1.168 unaffected ≤ 6.1.*
6.6.134 unaffected ≤ 6.6.*
6.12.81 unaffected ≤ 6.12.*
6.18.22 unaffected ≤ 6.18.*
6.19.12 unaffected ≤ 6.19.*
7.0 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/607245c4dbb86d9a10dd8388da0fb82170a99b61 cve-icon cve-icon
https://git.kernel.org/stable/c/6b419700e459fbf707ca1543b7c1b57a60fedb73 cve-icon cve-icon
https://git.kernel.org/stable/c/6d52a4a0520a6696bdde51caa11f2d6821cd0c01 cve-icon cve-icon
https://git.kernel.org/stable/c/761b45c661af48da6a065868d59ab1e1f64fd9b6 cve-icon cve-icon
https://git.kernel.org/stable/c/88a8f56e6276f616baad4274c6b8e4683e26e520 cve-icon cve-icon
https://git.kernel.org/stable/c/f08ffa3e1c8e36b6131f69c5eb23700c28cbd262 cve-icon cve-icon
History

Mon, 13 Apr 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.
Title netfilter: nfnetlink_log: account for netlink header size
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-04-13T13:21:03.974Z

Reserved: 2026-03-09T15:48:24.087Z

Link: CVE-2026-31416

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-04-13T14:16:10.907

Modified: 2026-04-13T15:01:43.663

Link: CVE-2026-31416

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.