---
id: CVE-2026-31417
title: 'net/x25: Fix overflow when accumulating packets'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/x25: Fix overflow when accumulating packets

  Add a check to ensure that `x25_sock.fraglen` does not overflow.

  The `fraglen` also needs to be resetted when purging …
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    96fc16370b0bceb289c7e0479bd0540b81e257aa
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    798d613afb64b01a203f448fb0f43c37c6afe79d
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    6e568835ea54a3e1d08e310e34f95d434e739477
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    1734bd85c5e0a7a801295b729efb56b009cb8fc3
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    4e2d1bcef78d21247fe8fef13bc7ed95885df2b5
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    8c92969c197b91c134be27dc3afb64ab468853a9
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    f953f11ccf4afe6feb635c08145f4240d9a6b544
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    a1822cb524e89b4cd2cf0b82e484a2335496a6d9
  - Linux 2.6.12
published: '2026-04-13'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:46:53.748Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31417'
references:
  - url: 'https://git.kernel.org/stable/c/96fc16370b0bceb289c7e0479bd0540b81e257aa'
  - url: 'https://git.kernel.org/stable/c/798d613afb64b01a203f448fb0f43c37c6afe79d'
  - url: 'https://git.kernel.org/stable/c/6e568835ea54a3e1d08e310e34f95d434e739477'
  - url: 'https://git.kernel.org/stable/c/1734bd85c5e0a7a801295b729efb56b009cb8fc3'
  - url: 'https://git.kernel.org/stable/c/4e2d1bcef78d21247fe8fef13bc7ed95885df2b5'
  - url: 'https://git.kernel.org/stable/c/8c92969c197b91c134be27dc3afb64ab468853a9'
  - url: 'https://git.kernel.org/stable/c/f953f11ccf4afe6feb635c08145f4240d9a6b544'
  - url: 'https://git.kernel.org/stable/c/a1822cb524e89b4cd2cf0b82e484a2335496a6d9'
tags:
  - cve.org
epss: 0.00828
epssPercentile: 0.5562
ingestedAt: '2026-09-08T15:33:26.991Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/x25: Fix overflow when accumulating packets

Add a check to ensure that `x25_sock.fraglen` does not overflow.

The `fraglen` also needs to be resetted when purging `fragment_queue` in
`x25_clear_queues()`.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 96fc16370b0bceb289c7e0479bd0540b81e257aa`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 798d613afb64b01a203f448fb0f43c37c6afe79d`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6e568835ea54a3e1d08e310e34f95d434e739477`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1734bd85c5e0a7a801295b729efb56b009cb8fc3`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4e2d1bcef78d21247fe8fef13bc7ed95885df2b5`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8c92969c197b91c134be27dc3afb64ab468853a9`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f953f11ccf4afe6feb635c08145f4240d9a6b544`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a1822cb524e89b4cd2cf0b82e484a2335496a6d9`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.