CVE-2026-31414

Advisory lineage Upstream: 0 Downstream: 12
Analyzed
Published: 13 Apr 2026, 13:21
Last modified:14 Jul 2026, 12:47

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (cve.org)
EPSS Score
0.38% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Apr 2026, 13:21
Published
Vulnerability first disclosed
14 Jul 2026, 12:47
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe. Use exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is attached to the skb.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.38%• Percentile: 30%

Affected Systems

  • linux•linux

    ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e7ccaa0a62a8ff2be5d521299ce79390c318d306 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4bd1b3d839172724b33d8d02c5a4ff6a1c775417 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b53294bff19e56ada2f230ceb8b1ffde61cc3817 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3dfd3f7712b5a800f2ba632179e9b738076a51f0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f01794106042ee27e54af6fdf5b319a2fe3df94d | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781 | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < e7ccaa0a62a8ff2be5d521299ce79390c318d306 | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < 4bd1b3d839172724b33d8d02c5a4ff6a1c775417 | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < b53294bff19e56ada2f230ceb8b1ffde61cc3817 | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < 3dfd3f7712b5a800f2ba632179e9b738076a51f0 | ≥ ea781f197d6a835cbb93a0bf88ee1696296ed8aa, < f01794106042ee27e54af6fdf5b319a2fe3df94d | 2.6.30

  • linux•linux kernel

    ≥ 2.6.30, < 6.1.168 | ≥ 6.2, < 6.6.134 | ≥ 6.7, < 6.12.81 | ≥ 6.13, < 6.18.22 | ≥ 6.19, < 6.19.12 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6

References (8)