THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-31617 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() The block_len read from the host-supplied NTB header is checked against ntb_max but has no lower bound. When block_len is smaller than opts->nd

[NVD] CVE-2026-31617 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() The block_len read from the host-supplied NTB header is checked against ntb_max but has no lower bound. When block_len is smaller than opts->nd

lownvdPublished 2026-04-24

CVE-2026-31617 CVSS: 5.5 MEDIUM Published: 2026-04-24T15:16:40.973

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()

The block_len read from the host-supplied NTB header is checked against ntb_max but has no lower bound. When block_len is smaller than opts->ndp_size, the bounds check of: ndp_index > (block_len

Indicators of compromise

CVE-2026-31617cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-31617