UBUNTU-CVE-2026-31531

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtmgetnexthop When querying a nexthop object via RTMGETNEXTHOP, the kernel currently allocates a fixed-size skb using NLMSGGOODSIZE. While sufficient for single nexthops and small...

CVE-2026-31531

The vulnerability CVE-2026-31531 affects the Linux kernel’s nexthop handling in IPv4 when querying large nexthop groups via RTM_GETNEXTHOP. The fixed issue was a fixed-size NLMSG buffer (NLMSG_GOODSIZE) that could overflow for large groups (e.g., 512 nexthops), causing kernel warnings and potenti...