CVE-2026-31496 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations in other netns via proc Skip expectations that do not reside in this netns. Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's conntrack entries via proc").
A vulnerability in the Linux kernel's netfilter component allows for the improper handling of connection tracking expectations across different network namespaces. This issue arises because expectations that do not belong to the current network namespace are not appropriately skipped when accessed via the proc filesystem. The vulnerability affects the conntrack expectation management, which is supposed to be isolated per network namespace.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-019113.html | siemens-SADP | |
| https://cert-portal.siemens.com/productcert/html/ssa-082556.html | siemens-SADP | |
| https://git.kernel.org/stable/c/168145c87444619e3e649322bbe7719ecd00d411 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2028405ea6987b4448784e439413202cfe19f43f | kernel.org | Patch |
| https://git.kernel.org/stable/c/3265ad619987cb551edaf797ed056d80ac450225 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3db5647984de03d9cae0dcddb509b058351f0ee4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9ca8c7452493d915f9bbf2f39331e6c583d07a23 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dcfcd95b3ae7683e8ae55c92284b3430ce614bc7 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.28.1, < 6.1.168 >= 6.2, < 6.6.131 >= 6.7, < 6.12.80 >= 6.13, < 6.18.21 >= 6.19, < 6.19.11 2.6.28 - 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | siemens-SADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 28, 2026 | Initial Analysis | [email protected] |
| Apr 22, 2026 | New CVE Received | kernel.org |