High 7.5Published Apr 13, 2026

CVE-2026-31417net/x25: Fix overflow when accumulating packets

Updated under an hour ago (Oct 27, 2026, 11:00 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25_sock.fraglen` does not overflow. The `fraglen` also needs to be resetted when purging `fragment_queue` in `x25_clear_queues()`.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 96fc16370b0bceb289c7e0479bd0540b81e257aa; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 798d613afb64b01a203f448fb0f43c37c6afe79d; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e568835ea54a3e1d08e310e34f95d434e739477; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1734bd85c5e0a7a801295b729efb56b009cb8fc3; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4e2d1bcef78d21247fe8fef13bc7ed95885df2b5; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8c92969c197b91c134be27dc3afb64ab468853a9; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f953f11ccf4afe6feb635c08145f4240d9a6b544; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a1822cb524e89b4cd2cf0b82e484a2335496a6d9	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.12.1 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 2.6.12; and 11 more ranges	NVD

References

References

https://git.kernel.org/stable/c/96fc16370b0bceb289c7e0479bd0540b81e257aa	patch
https://git.kernel.org/stable/c/798d613afb64b01a203f448fb0f43c37c6afe79d	patch
https://git.kernel.org/stable/c/6e568835ea54a3e1d08e310e34f95d434e739477	patch
https://git.kernel.org/stable/c/1734bd85c5e0a7a801295b729efb56b009cb8fc3	patch
https://git.kernel.org/stable/c/4e2d1bcef78d21247fe8fef13bc7ed95885df2b5	patch
https://git.kernel.org/stable/c/8c92969c197b91c134be27dc3afb64ab468853a9	patch
https://git.kernel.org/stable/c/f953f11ccf4afe6feb635c08145f4240d9a6b544	patch
https://git.kernel.org/stable/c/a1822cb524e89b4cd2cf0b82e484a2335496a6d9	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.