NULL pointer dereference in Linux kernel - CVE-2026-31422
Published: April 14, 2026
Vulnerability identifier: #VU125862
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-31422
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a null pointer dereference in flow_change() in the cls_flow classifier when creating a flow filter without a fully qualified baseclass on a shared block. A local user can create such a flow filter to cause a denial of service.
How to mitigate CVE-2026-31422
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/1a280dd4bd1d616a01d6ffe0de284c907b555504
- https://git.kernel.org/stable/c/415ea0c973c754b9f375225807810eb9045f4293
- https://git.kernel.org/stable/c/4a09f72007201c9f667dc47f64517ec23eea65e5
- https://git.kernel.org/stable/c/9bf5fc36a43f7b8b5507c96e74fb81f1e8b4957e
- https://git.kernel.org/stable/c/a208c3e1232997e9317887294c20008dfcb75449
- https://git.kernel.org/stable/c/cc707a4fd4c3b6ab2722e06bc359aa010e13d408