Open vSwitch: Invalid MPLS Payload Length in SET/SET_MASKED Actions
CVE-2026-31679 Published on April 25, 2026
openvswitch: validate MPLS set/set_masked payload length
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: validate MPLS set/set_masked payload length
validate_set() accepted OVS_KEY_ATTR_MPLS as variable-sized payload for
SET/SET_MASKED actions. In action handling, OVS expects fixed-size
MPLS key data (struct ovs_key_mpls).
Use the already normalized key_len (masked case included) and reject
non-matching MPLS action key sizes.
Reject invalid MPLS action payload lengths early.
Products Associated with CVE-2026-31679
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 68f32ef0683c8d1c05cd2e4f16818fa63ff59c6f is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 4cae986225f8b8679ad86b924918e7d75a96aa61 is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 8ed7b9930cbc3bc71f868fa79a68700ac88d586a is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below c1f97152df8dfb17e855ddf0fc409b7bd13e9700 is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 98de18d327ef8cbbb704980e359e4872d8c28997 is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below bd50c7484c3bb34097571c1334174fb8b7408036 is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 2ca33b88a79ca42f017ae0f7011280325655438e is affected.
- Version fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 and below 546b68ac893595877ffbd7751e5c55fd1c43ede6 is affected.
- Version 5.5 is affected.
- Before 5.5 is unaffected.
- Version 5.10.253, <= 5.10.* is unaffected.
- Version 5.15.203, <= 5.15.* is unaffected.
- Version 6.1.168, <= 6.1.* is unaffected.
- Version 6.6.131, <= 6.6.* is unaffected.
- Version 6.12.80, <= 6.12.* is unaffected.
- Version 6.18.21, <= 6.18.* is unaffected.
- Version 6.19.11, <= 6.19.* is unaffected.
- Version 7.0, <= * is unaffected.