CVE-2026-31496

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_expect: skip expectations in other netns via proc

Skip expectations that do not reside in this netns.

Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's conntrack entries via proc").

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < 2028405ea6987b4448784e439413202cfe19f43faffected
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < 168145c87444619e3e649322bbe7719ecd00d411affected
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < dcfcd95b3ae7683e8ae55c92284b3430ce614bc7affected
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < 9ca8c7452493d915f9bbf2f39331e6c583d07a23affected
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < 3265ad619987cb551edaf797ed056d80ac450225affected
LinuxLinux9b03f38d0487f3908696242286d934c9b38f9d2a < 3db5647984de03d9cae0dcddb509b058351f0ee4affected
LinuxLinux2.6.28affected
LinuxLinux0 < 2.6.28unaffected
LinuxLinux6.1.168 <= 6.1.*unaffected
LinuxLinux6.6.131 <= 6.6.*unaffected
LinuxLinux6.12.80 <= 6.12.*unaffected
LinuxLinux6.18.21 <= 6.18.*unaffected
LinuxLinux6.19.11 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References