CVE-2026-31416
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel, in the netfilter subsystem (nfnetlink_log), a bug was found in the size calculation of NLMSG_DONE messages. The netlink header size is not accounted for, which can trigger a WARN splat and drop the message.
Risk Assessment
The risk involves potential dropping of netfilter log messages, which may hinder network traffic monitoring and security incident analysis.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix (commit correcting NLMSG_DONE size calculation).
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.