CVE-2026-31679 Details
Description
In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/set_masked payload length validate_set() accepted OVS_KEY_ATTR_MPLS as variable-sized payload for SET/SET_MASKED actions. In action handling, OVS expects fixed-size MPLS key data (struct ovs_key_mpls). Use the already normalized key_len (masked case included) and reject non-matching MPLS action key sizes. Reject invalid MPLS action payload lengths early.
A vulnerability exists in the Linux kernel's Open vSwitch component, specifically in how it handles MPLS (Multiprotocol Label Switching) action payloads for SET and SET_MASKED actions. The issue arises because the validation function accepted MPLS payloads as variable-sized, while Open vSwitch requires a fixed size. This vulnerability is present in the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2ca33b88a79ca42f017ae0f7011280325655438e | kernel.org | Patch |
| https://git.kernel.org/stable/c/4cae986225f8b8679ad86b924918e7d75a96aa61 | kernel.org | Patch |
| https://git.kernel.org/stable/c/546b68ac893595877ffbd7751e5c55fd1c43ede6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/68f32ef0683c8d1c05cd2e4f16818fa63ff59c6f | kernel.org | Patch |
| https://git.kernel.org/stable/c/8ed7b9930cbc3bc71f868fa79a68700ac88d586a | kernel.org | Patch |
| https://git.kernel.org/stable/c/98de18d327ef8cbbb704980e359e4872d8c28997 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bd50c7484c3bb34097571c1334174fb8b7408036 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c1f97152df8dfb17e855ddf0fc409b7bd13e9700 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.5, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.168 >= 6.2, < 6.6.131 >= 6.7, < 6.12.80 >= 6.13, < 6.18.21 >= 6.19, < 6.19.11 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | Initial Analysis | [email protected] |
| Apr 27, 2026 | CVE Modified | kernel.org |
| Apr 25, 2026 | New CVE Received | kernel.org |