CVE-2026-31668

In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache per encap route, shared between seg6_input_core() and seg6_output_core(). These two paths can perform the post-encap SID lookup in different routing contexts (e.g., ip rules matching on the ingress interface, or VRF table separation). Whichever path runs first populates the cache, and the other reuses it blindly, bypassing its own lookup. Fix this by splitting the cache into cache_input and cache_output, so each path maintains its own cached dst independently.

• https://git.kernel.org/stable/c/17d87d42874f5d6c1a0ccc6d9190dfe82a9a7a6aPatch
• https://git.kernel.org/stable/c/1dec91d3b1cefb82635761b7812154af3ef46449Patch
• https://git.kernel.org/stable/c/57d0374d14fa667dec6952173b93e7e84486d5c9Patch
• https://git.kernel.org/stable/c/6305ad032b03d2ea4181b953a66e19a9a6ed053cPatch
• https://git.kernel.org/stable/c/750569d6987a0ff46317a4b86eb3907e296287bfPatch
• https://git.kernel.org/stable/c/84d458018b147176b259347103fccb7e93abd2b1Patch
• https://git.kernel.org/stable/c/c3812651b522fe8437ebb7063b75ddb95b571643Patch
• https://git.kernel.org/stable/c/fb56de5d99218de49d5d43ef3a99e062ecd0f9a1Patch

Published

Apr 24, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31662In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-31663In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31664In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31665In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31666In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31667In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31669In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-3167A security flaw has been discovered in Tenda F453 1.0.0.3. T…8.8
• CVE-2026-31670In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31671In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31672In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31673In the Linux kernel, the following vulnerability has been re…7.8