{"id":"CVE-2026-31417","title":"net/x25: Fix overflow when accumulating packets","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/x25: Fix overflow when accumulating packets\n\nAdd a check to ensure that `x25_sock.fraglen` does not overflow.\n\nThe `fraglen` also needs to be resetted when purging …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 96fc16370b0bceb289c7e0479bd0540b81e257aa","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 798d613afb64b01a203f448fb0f43c37c6afe79d","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6e568835ea54a3e1d08e310e34f95d434e739477","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1734bd85c5e0a7a801295b729efb56b009cb8fc3","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4e2d1bcef78d21247fe8fef13bc7ed95885df2b5","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8c92969c197b91c134be27dc3afb64ab468853a9","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f953f11ccf4afe6feb635c08145f4240d9a6b544","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a1822cb524e89b4cd2cf0b82e484a2335496a6d9","Linux 2.6.12"],"published":"2026-04-13","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:46:53.748Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31417","references":[{"url":"https://git.kernel.org/stable/c/96fc16370b0bceb289c7e0479bd0540b81e257aa"},{"url":"https://git.kernel.org/stable/c/798d613afb64b01a203f448fb0f43c37c6afe79d"},{"url":"https://git.kernel.org/stable/c/6e568835ea54a3e1d08e310e34f95d434e739477"},{"url":"https://git.kernel.org/stable/c/1734bd85c5e0a7a801295b729efb56b009cb8fc3"},{"url":"https://git.kernel.org/stable/c/4e2d1bcef78d21247fe8fef13bc7ed95885df2b5"},{"url":"https://git.kernel.org/stable/c/8c92969c197b91c134be27dc3afb64ab468853a9"},{"url":"https://git.kernel.org/stable/c/f953f11ccf4afe6feb635c08145f4240d9a6b544"},{"url":"https://git.kernel.org/stable/c/a1822cb524e89b4cd2cf0b82e484a2335496a6d9"}],"tags":["cve.org"],"epss":0.00449,"epssPercentile":0.38422,"ingestedAt":"2026-09-08T15:33:26.991Z","slug":"CVE-2026-31417","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/x25: Fix overflow when accumulating packets\n\nAdd a check to ensure that `x25_sock.fraglen` does not overflow.\n\nThe `fraglen` also needs to be resetted when purging `fragment_queue` in\n`x25_clear_queues()`.\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 96fc16370b0bceb289c7e0479bd0540b81e257aa`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 798d613afb64b01a203f448fb0f43c37c6afe79d`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6e568835ea54a3e1d08e310e34f95d434e739477`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1734bd85c5e0a7a801295b729efb56b009cb8fc3`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4e2d1bcef78d21247fe8fef13bc7ed95885df2b5`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8c92969c197b91c134be27dc3afb64ab468853a9`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f953f11ccf4afe6feb635c08145f4240d9a6b544`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a1822cb524e89b4cd2cf0b82e484a2335496a6d9`\n- `Linux 2.6.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}