Scheduled maintenance: Some features related to account registration and licensing may be temporarily unavailable from Friday (May 8) at 1 PM to Sunday (May 10) at 5 PM (PST).
HomeDefectsLIN1024-20224
Acknowledged

LIN1024-20224 : Security Advisory - linux - CVE-2026-31671

Created: Apr 27, 2026    Updated: Apr 30, 2026
Found In Version: 10.24.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  xfrm_user: fix info leak in build_report()  struct xfrm_user_report is a __u8 proto field followed by a struct xfrm_selector which means there is three "empty" bytes of padding, but the padding is never zeroed before copying to userspace.  Fix that up by zeroing the structure before setting individual member variables.