CVE-2026-31496

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-31496
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31496.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-31496
Downstream
Related
Published
2026-04-22T13:54:18.287Z
Modified
2026-06-18T03:56:35.239772182Z
Summary
netfilter: nf_conntrack_expect: skip expectations in other netns via proc
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfconntrackexpect: skip expectations in other netns via proc

Skip expectations that do not reside in this netns.

Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's conntrack entries via proc").

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31496.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9b03f38d0487f3908696242286d934c9b38f9d2a
Fixed
2028405ea6987b4448784e439413202cfe19f43f
Fixed
168145c87444619e3e649322bbe7719ecd00d411
Fixed
dcfcd95b3ae7683e8ae55c92284b3430ce614bc7
Fixed
9ca8c7452493d915f9bbf2f39331e6c583d07a23
Fixed
3265ad619987cb551edaf797ed056d80ac450225
Fixed
3db5647984de03d9cae0dcddb509b058351f0ee4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31496.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.28
Fixed
6.1.168
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.131
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.80
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.21
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.11

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31496.json"