Skip to main content
CVE-2026-31645VulnerabilityPublished Updated

error paths · net: lan966x: fix page pool leak

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-31645· Low

Not known to be exploited · fixed in a229a4dc87302fa131f3394b09b0efd8c255a5ac : update Microsoft when convenient.

Data as of 30 Oct 2026, 06:59 UTC

Severity
Low

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in a229a4dc87302fa131f3394b09b0efd8c255a5ac, 076344a6ad9d1308faaed1402fdcfdda68b604ab, 4941e234cfd67ac911fb259642b453f9f76aac41 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Apr 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 11871aba19748b3387e83a2db6360aa7119e9a1a, < a229a4dc87302fa131f3394b09b0efd8c255a5ac
Fixed in
  • a229a4dc87302fa131f3394b09b0efd8c255a5ac
LinuxLinuxAffected
  • ≥ 11871aba19748b3387e83a2db6360aa7119e9a1a, < 076344a6ad9d1308faaed1402fdcfdda68b604ab
Fixed in
  • 076344a6ad9d1308faaed1402fdcfdda68b604ab
LinuxLinuxAffected
  • ≥ 11871aba19748b3387e83a2db6360aa7119e9a1a, < 4941e234cfd67ac911fb259642b453f9f76aac41
Fixed in
  • 4941e234cfd67ac911fb259642b453f9f76aac41
LinuxLinuxAffected
  • ≥ 11871aba19748b3387e83a2db6360aa7119e9a1a, < 73e940c4249dc5ec6422d1fae535d192fb125955
Fixed in
  • 73e940c4249dc5ec6422d1fae535d192fb125955
LinuxLinuxAffected
  • ≥ 11871aba19748b3387e83a2db6360aa7119e9a1a, < 22e1ee9f22b5c3bb702bb6d4167d770002a85b2b
Fixed in
  • 22e1ee9f22b5c3bb702bb6d4167d770002a85b2b
LinuxLinuxAffected
  • =6.2
Fixed in–

Description

CVE-2026-31645 is a vulnerability identified in Microsoft software version 3.0 related to a page pool leak in error paths within the net: lan966x component. The provided information does not include technical details beyond the existence of this memory leak issue. No CVSS score or detailed impact description is available.

References

Community reviews

Loading reviews…