Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31429

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is intentionally set to a non-power-of-2 value (e.g. 704 on x86_64) to avoid collisions with generic kmalloc bucket sizes. This ensures that skb_kfree_head() can reliably use skb_end_offset to distinguish skb heads allocated from skb_small_head_cache vs. generic kmalloc caches. However, when KFENCE is enabled, kfence_ksize() returns the exac
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:274b2dcff5695f08d89994ebe8251c809f77c4240be91ae447ce21a319f2a20f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/skbuff.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.82","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.23","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/skbuff.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"128b03ccb2582a643983a48a37fda58df80edbde","status":"affected","version":"bf9f1baa279f0758dc2297080360c5a616843927","versionType":"git"},{"lessThan":"60313768a8edc7094435975587c00c2d7b834083","status":"affected","version":"bf9f1baa279f0758dc2297080360c5a616843927","versionType":"git"},{"lessThan":"2d64618ea846d8d033477311f805ca487d6a6696","status":"affected","version":"bf9f1baa279f0758dc2297080360…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/skbuff.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.82","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.23","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/skbuff.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"128b03ccb2582a643983a48a37fda58df80edbde","status":"affected","version":"bf9f1baa279f0758dc2297080360c5a616843927","versionType":"git"},{"lessThan":"60313768a8edc7094435975587c00c2d7b834083","status":"affected","version":"bf9f1baa279f0758dc2297080360c5a616843927","versionType":"git"},{"lessThan":"2d64618ea846d8d033477311f805ca487d6a6696","status":"affected","version":"bf9f1baa279f0758dc2297080360…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/0f42e3f4fe2a58394e37241d02d9ca6ab7b7d516"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/128b03ccb2582a643983a48a37fda58df80edbde"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/2d64618ea846d8d033477311f805ca487d6a6696"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/474e00b935db250cac320d10c1d3cf4e44b46721"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/60313768a8edc7094435975587c00c2d7b834083"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:525c58506c63a98e1aef29eeb11ef5b423419b4ac11482564df88e7fe03d3422 · sha256:4847a877ec88ef3f… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer