Medium severity5.5NVD Advisory· Published Apr 24, 2026· Updated Jun 1, 2026

CVE-2026-31623

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()

A malicious USB device claiming to be a CDC Phonet modem can overflow the skb_shared_info->frags[] array by sending an unbounded sequence of full-page bulk transfers.

Drop the skb and increment the length error when the frag limit is reached. This matches the same fix that commit f0813bcd2d9d ("net: wwan: t7xx: fix potential skb->frags overflow in RX path") did for the t7xx driver.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=2.6.31,<6.6.136
- (no CPE)
osv-coords11 versions
pkg:apk/chainguard/linux-aws-6.12 pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-gcp-6.12 pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-qemu-6.12 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installed pkg:apk/chainguard/linux-vmware-6.12 pkg:apk/chainguard/linux-vmware-6.18 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
< 6.12.85-r0+ 10 more
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 7.0.3-1.1

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2026-31623

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions