netlink policy validation

CVE-2026-31495 is a reminder that some of the most consequential Linux kernel flaws are not dramatic memory-corruption headlines but quiet trust-boundary failures in the networking stack. In this case, the kernel’s ctnetlink path accepted malformed netlink values that should have been rejected...

Linux administrators have a fresh reason to inspect their kernel patching cadence: CVE-2026-31407 highlights a pair of netfilter conntrack validation gaps that can lead to out-of-bounds memory access in SCTP and ctnetlink handling. The vulnerability was published to the CVE List on April 6...