Search: CVE-2026-31685

CVE-2026-31685 is a critical vulnerability in the Linux kernel's netfilter ip6t_eui64 module. The flaw involves improper validation of the MAC header in IPv6 packets, allowing packets with invalid MAC headers to be processed under certain conditions. This occurs because the check rejecting invalid MAC headers was only applied when the fragment offset was non-zero, leaving packets with zero fragment offset vulnerable. The issue has been fixed by removing this condition, ensuring all packets with invalid MAC headers are rejected before accessing the Ethernet header.