Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-31679— openvswitch: validate MPLS set/set_masked payload length

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于openvswitch中MPLS设置操作未验证有效载荷长度，可能导致接受无效动作键大小。

CVSS 7.1 · High EPSS 0.17% · P6

Possible ATT&CK Techniques 1 AI

T1562.001

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 68f32ef0683c8d1c05cd2e4f16818fa63ff59c6f affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 4cae986225f8b8679ad86b924918e7d75a96aa61 affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 8ed7b9930cbc3bc71f868fa79a68700ac88d586a affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< c1f97152df8dfb17e855ddf0fc409b7bd13e9700 affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 98de18d327ef8cbbb704980e359e4872d8c28997 affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< bd50c7484c3bb34097571c1334174fb8b7408036 affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 2ca33b88a79ca42f017ae0f7011280325655438e affected
fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3< 546b68ac893595877ffbd7751e5c55fd1c43ede6 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-31679

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
openvswitch: validate MPLS set/set_masked payload length
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/set_masked payload length validate_set() accepted OVS_KEY_ATTR_MPLS as variable-sized payload for SET/SET_MASKED actions. In action handling, OVS expects fixed-size MPLS key data (struct ovs_key_mpls). Use the already normalized key_len (masked case included) and reject non-matching MPLS action key sizes. Reject invalid MPLS action payload lengths early.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于openvswitch中MPLS设置操作未验证有效载荷长度，可能导致接受无效动作键大小。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 ~ 68f32ef0683c8d1c05cd2e4f16818fa63ff59c6f -
Linux Linux 5.5 -

II. Public POCs for CVE-2026-31679

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31679

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-25 · 13 CVEs total

CVE-2026-31685 9.4 CRITICAL netfilter: ip6t_eui64: reject invalid MAC header for all packets
CVE-2026-31682 9.1 CRITICAL bridge: br_nd_send: linearize skb before parsing ND options
CVE-2026-31683 7.8 HIGH batman-adv: avoid OGM aggregation when skb tailroom is insufficient
CVE-2026-31680 7.8 HIGH net: ipv6: flowlabel: defer exclusive option free until RCU teardown
CVE-2026-31678 7.8 HIGH openvswitch: defer tunnel netdev_put to RCU release
CVE-2026-31675 7.8 HIGH net/sched: sch_netem: fix out-of-bounds access in packet corruption
CVE-2026-31673 7.8 HIGH af_unix: read UNIX_DIAG_VFS data under unix_state_lock
CVE-2026-31676 7.5 HIGH rxrpc: only handle RESPONSE during service challenge
CVE-2026-31674 7.1 HIGH netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers
CVE-2026-31681 netfilter: xt_multiport: validate range encoding in checkentry
CVE-2026-31677 crypto: af_alg - limit RX SG extraction by receive buffer budget

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31679

No comments yet

Leave a comment