VulnSocial

CVE-2026-31668General(linux / linux_kernel)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache per encap route, shared between seg6_input_core() and seg6_output_core(). These two paths can perform the post-encap SID lookup in different routing contexts (e.g., ip rules matching on the ingress interface, or VRF table separation). Whichever path runs first populates the cache, and the other reuses it blindly, bypassing its own lookup. Fix this by splitting the cache into cache_input and cache_output, so each path maintains its own cached dst independently.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-24); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
linux
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-24: 2Mentions · 2026-06-02: 1Patch / Workaround · 2026-04-24: 1Technical Details · 2026-04-24: 1Technical Details · 2026-06-02: 104-2406-02
Signal classification3 categories
General
133.3%
Patch
133.3%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-242
General1Patch1
2026-06-021
Disclosure1
Full discourse3 posts
  • Loutres@loutres_
    Disclosure

    自宅ASをSRv6で再構築してたらおかしい挙動を見つけて、調べたらCVEとして１週間前に発表されてておもしろい LinuxのSRv6実装でinputとoutputが同じdst_cacheを使っていた 私はL3VPN over SRv6で、forwardがinput/outputで違うVRFを通るからほとんど疎通しない状況になってた https://nvd.nist.gov/vuln/detail/CVE-2026-31668

    Post summary

    The user discovered anomalous behavior while rebuilding a home AS with SRv6, identified the issue as CVE‑2026‑31668, and noted that the vulnerability involves identical dst_cache usage for input and output in Linux SRv6, causing connectivity problems.

    01020548
    82 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-31668 Seg6 Lwtunnel Dst_Cache Separation for Input and Output Paths https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31668

    Post summary

    The content lists the CVE identifier and a link but provides no further information on the vulnerability, its impact, or mitigations.

    0000041
    4.0K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-31668 In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a si… https://www.cve.org/CVERecord?id=CVE-2026-31668

    Post summary

    CVE‑2026‑31668, a seg6 lwtunnel kernel issue, has been fixed; the statement provides only patch confirmation and technical details, with no PoC or exploitation evidence.

    0000058
    57.2K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel4.10--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities