U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-31518 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output_tail_tcp will return an error and not free the skb, because with synchronous crypto, the common xfrm output code will drop the packet for us. With async crypto (esp_output_done), we need to drop the skb when esp_output_tail_tcp returns an error.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2 kernel.org Patch 
https://git.kernel.org/stable/c/41aafca57de4a4c026701622bd4648f112a9edcd kernel.org Patch 
https://git.kernel.org/stable/c/4820847e036ff1035b01b69ad68dfc17e7028fe9 kernel.org Patch 
https://git.kernel.org/stable/c/6a3ec6efbc4f90e0ccb2e71574f07351f19996f4 kernel.org Patch 
https://git.kernel.org/stable/c/6aa9841d917532d0f2d932d1ff2f3a94305aaf47 kernel.org Patch 
https://git.kernel.org/stable/c/88d386243ed374ac969dabd3bbc1409a31d81818 kernel.org Patch 
https://git.kernel.org/stable/c/aca3ad0c262f54a5b5c95dda80a48365997d1224 kernel.org Patch 
https://git.kernel.org/stable/c/df6f995358dc1f3c42484f5cfe241d7bd3e1cd15 kernel.org Patch 

Weakness Enumeration

CWE-ID CWE Name Source
CWE-401 Missing Release of Memory after Effective Lifetime cwe source acceptance level NIST  

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

2 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-31518
NVD Published Date:
04/22/2026
NVD Last Modified:
04/28/2026
Source:
kernel.org