CVE-2026-31472
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/04/2026
Última modificación:
23/04/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfrm: iptfs: validate inner IPv4 header length in IPTFS payload<br />
<br />
Add validation of the inner IPv4 packet tot_len and ihl fields parsed<br />
from decrypted IPTFS payloads in __input_process_payload(). A crafted<br />
ESP packet containing an inner IPv4 header with tot_len=0 causes an<br />
infinite loop: iplen=0 leads to capturelen=min(0, remaining)=0, so the<br />
data offset never advances and the while(data



