CVE-2026-31685

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter component where the eui64 mt6() function derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The system failed to reject invalid MAC headers for packets where the par->fragoff variable was equal to 0, allowing the function to access eth hdr(skb) despite the invalid header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.