HOMEVULNERABILITIESCVE-2026-31738
MEDIUM

CVE-2026-31738

Published: May 1, 2026· Updated: May 7, 2026

5.5
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:6.8th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

vxlan: validate ND option lengths in vxlan_na_create

vxlan_na_create() walks ND options according to option-provided

lengths. A malformed option can make the parser advance beyond the

computed option span or use a too-short source LLADDR option payload.

Validate option lengths against the remaining NS option area before

advancing, and only read source LLADDR when the option is large enough

for an Ethernet address.

NVD Source

Technical Analysis

CVE-2026-31738 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Linux1 product
linux kernel
Source: NVD CPE · 3 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://git.kernel.org/stable/c/2029712fb2c87e9a8c75094906f2ee29bf08c500
PATCHhttps://git.kernel.org/stable/c/602596c69a70e50d9ab8c6ae0290a01f88229dd7
PATCHhttps://git.kernel.org/stable/c/901c1dd3bab2955d7e664f914c374c8c3ac2b958
PATCHhttps://git.kernel.org/stable/c/afa9a05e6c4971bd5586f1b304e14d61fb3d9385
PATCHhttps://git.kernel.org/stable/c/b69c4236255bd8de16cd876e58c6f0867d1d78b1
PATCHhttps://git.kernel.org/stable/c/de20d2e3b9179d132f5f5b44e490d7c916c6321b
PATCHhttps://git.kernel.org/stable/c/e476745917a1e288eb15e7ff49d286a86a4861d3
PATCHhttps://git.kernel.org/stable/c/eddfce70a6f3107d1679b0c2fcbeb96b593bd679

All References (8)

→
https://git.kernel.org/stable/c/2029712fb2c87e9a8c75094906f2ee29bf08c500Patch
→
https://git.kernel.org/stable/c/602596c69a70e50d9ab8c6ae0290a01f88229dd7Patch
→
https://git.kernel.org/stable/c/901c1dd3bab2955d7e664f914c374c8c3ac2b958Patch
→
https://git.kernel.org/stable/c/afa9a05e6c4971bd5586f1b304e14d61fb3d9385Patch
→
https://git.kernel.org/stable/c/b69c4236255bd8de16cd876e58c6f0867d1d78b1Patch
→
https://git.kernel.org/stable/c/de20d2e3b9179d132f5f5b44e490d7c916c6321bPatch
→
https://git.kernel.org/stable/c/e476745917a1e288eb15e7ff49d286a86a4861d3Patch
→
https://git.kernel.org/stable/c/eddfce70a6f3107d1679b0c2fcbeb96b593bd679Patch

Quick Facts

CVE IDCVE-2026-31738
CVSS Score5.5 / 10
SeverityMEDIUM
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor
PublishedMay 1, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-31738 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-31738·NVD