CVE-2026-31407

A flaw was found in the Linux kernel's netfilter conntrack subsystem. Missing netlink policy validations allow a local attacker to provide a specially crafted input, leading to an out-of-bounds read. This vulnerability can result in information disclosure from kernel memory or potentially cause a denial of service.

Unvalidated SCTP state and expectation direction allowed slab OOB reads. Attributes are consumed from nfnetlink without range checks until this fix. Requires CAP_NET_ADMIN to send the malformed netlink messages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.