{"id":"CVE-2026-31416","summary":"netfilter: nfnetlink_log: account for netlink header size","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_log: account for netlink header size\n\nThis is a followup to an old bug fix: NLMSG_DONE needs to account\nfor the netlink header size, not just the attribute size.\n\nThis can result in a WARN splat + drop of the netlink message,\nbut other than this there are no ill effects.","modified":"2026-10-28T02:30:34.879013863Z","published":"2026-04-13T13:21:03.974Z","related":["SUSE-SU-2026:2068-1","SUSE-SU-2026:21834-1","SUSE-SU-2026:21841-1","SUSE-SU-2026:21845-1","SUSE-SU-2026:21860-1","SUSE-SU-2026:21876-1","SUSE-SU-2026:21877-1","SUSE-SU-2026:21916-1","SUSE-SU-2026:21919-1","SUSE-SU-2026:2217-1","SUSE-SU-2026:2238-1","openSUSE-SU-2026:20826-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31416.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/09883bf257f4243ed5a1fd35078ec6f0d0f3696a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4ec216410fac9de83c99177a160ebb8d42fad075"},{"type":"WEB","url":"https://git.kernel.org/stable/c/607245c4dbb86d9a10dd8388da0fb82170a99b61"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6b419700e459fbf707ca1543b7c1b57a60fedb73"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d52a4a0520a6696bdde51caa11f2d6821cd0c01"},{"type":"WEB","url":"https://git.kernel.org/stable/c/761b45c661af48da6a065868d59ab1e1f64fd9b6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/88a8f56e6276f616baad4274c6b8e4683e26e520"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f08ffa3e1c8e36b6131f69c5eb23700c28cbd262"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31416.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31416"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9dfa1dfe4d5e5e66a991321ab08afe69759d797a"},{"fixed":"4ec216410fac9de83c99177a160ebb8d42fad075"},{"fixed":"09883bf257f4243ed5a1fd35078ec6f0d0f3696a"},{"fixed":"761b45c661af48da6a065868d59ab1e1f64fd9b6"},{"fixed":"607245c4dbb86d9a10dd8388da0fb82170a99b61"},{"fixed":"6b419700e459fbf707ca1543b7c1b57a60fedb73"},{"fixed":"88a8f56e6276f616baad4274c6b8e4683e26e520"},{"fixed":"f08ffa3e1c8e36b6131f69c5eb23700c28cbd262"},{"fixed":"6d52a4a0520a6696bdde51caa11f2d6821cd0c01"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.10.61"},{"fixed":"3.11"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.12.34"},{"fixed":"3.13"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.14.25"},{"fixed":"3.15"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.17.4"},{"fixed":"3.18"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3a758a2b78da2f49f7165678faf999e946a0c4b5"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"131172845aa2c804ffa9423455aee585061ea35e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b1fef6b81871a396f3b8702077333e769673c87b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"add9183d993c12fb61ce0a674a424341d5be5b36"}]}],"versions":["v3.10.108","v3.10.107","v3.10.106","v3.10.105","v3.10.104","v3.10.103","v3.10.102","v3.10.101","v3.10.100","v3.10.99","v3.10.98","v3.10.97","v3.10.96","v3.10.95","v3.10.94","v3.10.93","v3.10.92","v3.10.91","v3.10.90","v3.10.89","v3.10.88","v3.10.87","v3.10.86","v3.10.85","v3.10.84","v3.10.83","v3.10.82","v3.10.81","v3.10.80","v3.10.79","v3.10.78","v3.10.77","v3.10.76","v3.10.75","v3.10.74","v3.10.73","v3.10.72","v3.10.71","v3.10.70","v3.10.69","v3.10.68","v3.10.67","v3.10.66","v3.10.65","v3.10.64","v3.10.63","v3.10.62","v3.10.61","v3.12.74","v3.12.73","v3.12.72","v3.12.71","v3.12.70","v3.12.69","v3.12.68","v3.12.67","v3.12.66","v3.12.65","v3.12.64","v3.12.63","v3.12.62","v3.12.61","v3.12.60","v3.12.59","v3.12.58","v3.12.57","v3.12.56","v3.12.55","v3.12.54","v3.12.53","v3.12.52","v3.12.51","v3.12.50","v3.12.49","v3.12.48","v3.12.47","v3.12.46","v3.12.45","v3.12.44","v3.12.43","v3.12.42","v3.12.41","v3.12.40","v3.12.39","v3.12.38","v3.12.37","v3.12.36","v3.12.35","v3.12.34","v3.14.79","v3.14.78","v3.14.77","v3.14.76","v3.14.75","v3.14.74","v3.14.73","v3.14.72","v3.14.71","v3.14.70","v3.14.69","v3.14.68","v3.14.67","v3.14.66","v3.14.65","v3.14.64","v3.14.63","v3.14.62","v3.14.61","v3.14.60","v3.14.59","v3.14.58","v3.14.57","v3.14.56","v3.14.55","v3.14.54","v3.14.53","v3.14.52","v3.14.51","v3.14.50","v3.14.49","v3.14.48","v3.14.47","v3.14.46","v3.14.45","v3.14.44","v3.14.43","v3.14.42","v3.14.41","v3.14.40","v3.14.39","v3.14.38","v3.14.37","v3.14.36","v3.14.35","v3.14.34","v3.14.33","v3.14.32","v3.14.31","v3.14.30","v3.14.29","v3.14.28","v3.14.27","v3.14.26","v3.14.25","v3.17.8","v3.17.7","v3.17.6","v3.17.5","v3.17.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31416.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.18.0"},{"fixed":"5.10.253"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.203"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.168"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.134"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.81"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.22"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.12"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31416.json"}}],"schema_version":"1.9.2"}