🔐 CVE Alert

CVE-2026-31685

UNKNOWN 0.0

netfilter: ip6t_eui64: reject invalid MAC header for all packets

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects an invalid MAC header when `par->fragoff != 0`. For packets with `par->fragoff == 0`, `eui64_mt6()` can still reach `eth_hdr(skb)` even when the MAC header is not valid. Fix this by removing the `par->fragoff != 0` condition so that packets with an invalid MAC header are rejected before accessing `eth_hdr(skb)`.

Vendor linux
Product linux
Ecosystems
Industries
Technology
Published Apr 25, 2026
Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Linux / Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9eda5478746ef7dc0e4e537b5a5e4b0ca1027091 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 807d6ee15804df6f01a35c910f09612e858739a6 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 309ae3e9a51a69699ca94eac5fac5688fa562d55 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fdce0b3590f724540795b874b4c8850c90e6b0a8
Linux / Linux
2.6.12

References

NVD ↗ CVE.org ↗ EPSS Data ↗
git.kernel.org: https://git.kernel.org/stable/c/9eda5478746ef7dc0e4e537b5a5e4b0ca1027091 git.kernel.org: https://git.kernel.org/stable/c/807d6ee15804df6f01a35c910f09612e858739a6 git.kernel.org: https://git.kernel.org/stable/c/309ae3e9a51a69699ca94eac5fac5688fa562d55 git.kernel.org: https://git.kernel.org/stable/c/fdce0b3590f724540795b874b4c8850c90e6b0a8