CVE-2026-31517

kernel: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 22, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's IP-TFS (IP-Transparent Fragmentation Service) subsystem. A remote attacker could send specially crafted network packets that, during the reassembly process, cause the kernel to attempt an invalid operation on a network buffer. This improper handling of network packet fragments can lead to a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-788 · Access of Memory Location After End of Buffer