Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-31414— netfilter: nf_conntrack_expect: use expect->helper

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未使用expect->helper，可能导致转储帮助程序名称时出现不安全行为。

CVSS 9.8 · Critical EPSS 0.45% · P38

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux ea781f197d6a835cbb93a0bf88ee1696296ed8aa< 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781 affected
ea781f197d6a835cbb93a0bf88ee1696296ed8aa< e7ccaa0a62a8ff2be5d521299ce79390c318d306 affected
ea781f197d6a835cbb93a0bf88ee1696296ed8aa< 4bd1b3d839172724b33d8d02c5a4ff6a1c775417 affected
ea781f197d6a835cbb93a0bf88ee1696296ed8aa< b53294bff19e56ada2f230ceb8b1ffde61cc3817 affected
ea781f197d6a835cbb93a0bf88ee1696296ed8aa< 3dfd3f7712b5a800f2ba632179e9b738076a51f0 affected
ea781f197d6a835cbb93a0bf88ee1696296ed8aa< f01794106042ee27e54af6fdf5b319a2fe3df94d affected
2.6.30 affected
< 2.6.30 unaffected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-31414

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
netfilter: nf_conntrack_expect: use expect->helper
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe. Use exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is attached to the skb.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未使用expect->helper，可能导致转储帮助程序名称时出现不安全行为。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux ea781f197d6a835cbb93a0bf88ee1696296ed8aa ~ 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781 -
Linux Linux 2.6.30 -

II. Public POCs for CVE-2026-31414

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31414

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-13 · 15 CVEs total

CVE-2026-31419 7.8 HIGH net: bonding: fix use-after-free in bond_xmit_broadcast()
CVE-2026-31417 7.5 HIGH net/x25: Fix overflow when accumulating packets
CVE-2026-31426 7.0 HIGH ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
CVE-2026-31428 netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
CVE-2026-31425 rds: ib: reject FRMR registration before IB connection is established
CVE-2026-31424 netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
CVE-2026-31423 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
CVE-2026-31422 net/sched: cls_flow: fix NULL pointer dereference on shared blocks
CVE-2026-31420 bridge: mrp: reject zero test interval to avoid OOM panic
CVE-2026-31421 net/sched: cls_fw: fix NULL pointer dereference on shared blocks
CVE-2026-31418 netfilter: ipset: drop logically empty buckets in mtype_del
CVE-2026-31416 netfilter: nfnetlink_log: account for netlink header size
CVE-2026-31415 ipv6: avoid overflows in ip6_datagram_send_ctl()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31414

No comments yet

Leave a comment