CVE-2026-31416
netfilter: nfnetlink_log: account for netlink header size
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.
INFO
Published Date :
April 13, 2026, 2:16 p.m.
Last Modified :
April 13, 2026, 3:01 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-31416
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Apply the netfilter patch to the Linux kernel.
- Update the Linux kernel to the latest secure version.
- Rebuild and deploy the kernel with the fix.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-31416.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-31416 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-31416
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-31416 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-31416 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Apr. 13, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects. Added Reference https://git.kernel.org/stable/c/607245c4dbb86d9a10dd8388da0fb82170a99b61 Added Reference https://git.kernel.org/stable/c/6b419700e459fbf707ca1543b7c1b57a60fedb73 Added Reference https://git.kernel.org/stable/c/6d52a4a0520a6696bdde51caa11f2d6821cd0c01 Added Reference https://git.kernel.org/stable/c/761b45c661af48da6a065868d59ab1e1f64fd9b6 Added Reference https://git.kernel.org/stable/c/88a8f56e6276f616baad4274c6b8e4683e26e520 Added Reference https://git.kernel.org/stable/c/f08ffa3e1c8e36b6131f69c5eb23700c28cbd262