Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31518

In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output_tail_tcp will return an error and not free the skb, because with synchronous crypto, the common xfrm output code will drop the packet for us. With async crypto (esp_output_done), we need to drop the skb when esp_output_tail_tcp returns an error.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:decae31e5b12663c4bcfb58cc5887521327a81a107a6a6f20ba2ee018ce43dc1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 12 assertions

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/8

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/2

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/esp4.c","net/ipv6/esp6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"}…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/esp4.c","net/ipv6/esp6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"aca3ad0c262f54a5b5c95dda80a48365997d1224","status":"affected","version":"e27cca96cd68fa2c6814c90f9a1cfd36bb68c593","versionType":"git"},{"lessThan":"41aafca57de4a4c026701622bd4648f112a9edcd","status":"affected","version":"e27cca96cd68fa2c6814c90f9a1cfd36bb68c593","versionType":"git"},{"lessThan":"4820847e036ff1035b01b69ad68dfc17e7028fe9","status":"affected","version":"e27cca96cd68…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/5

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/7

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/4

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/6

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/1

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/9

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/3

Affected products and versions

12 source assertions
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/8
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/2
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/esp4.c","net/ipv6/esp6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"}…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/esp4.c","net/ipv6/esp6.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"aca3ad0c262f54a5b5c95dda80a48365997d1224","status":"affected","version":"e27cca96cd68fa2c6814c90f9a1cfd36bb68c593","versionType":"git"},{"lessThan":"41aafca57de4a4c026701622bd4648f112a9edcd","status":"affected","version":"e27cca96cd68fa2c6814c90f9a1cfd36bb68c593","versionType":"git"},{"lessThan":"4820847e036ff1035b01b69ad68dfc17e7028fe9","status":"affected","version":"e27cca96cd68…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/5
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/7
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/4
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/6
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/1
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/9
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/affected/3

Source references

10 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/references/1
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/adp/0/references/0
{"url":"https://git.kernel.org/stable/c/0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/41aafca57de4a4c026701622bd4648f112a9edcd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4820847e036ff1035b01b69ad68dfc17e7028fe9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/6a3ec6efbc4f90e0ccb2e71574f07351f19996f4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6aa9841d917532d0f2d932d1ff2f3a94305aaf47"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/88d386243ed374ac969dabd3bbc1409a31d81818"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/aca3ad0c262f54a5b5c95dda80a48365997d1224"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/df6f995358dc1f3c42484f5cfe241d7bd3e1cd15"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1b804ce349f63a491f88f28b48b0caa3f82a8b003d160c22b6929afb6f2b788 · sha256:ae7434317de4e145… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer