Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0013 1.9 —
AFFECTED Product Versions Fixed Linux 20f6a05ef63594feb0c6dfbd629da0448b43124d – — Linux 5.8 – 5.10.270
TIMELINE Mar 9 Reserved by Linux Apr 13 Published (CNA: Linux) Sep 14 ENRICHED — CVE-2026-31420 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accept the user-supplied interval value from netlink without validation. When interval is 0, usecs_to_jiffies(0) yields 0, causing the delayed work (br_mrp_test_work_expired / br_mrp_in_test_work_expired) to reschedule itself with zero delay. This creates a tight loop on system_percpu_wq that allocates and transmits MRP test frames at maximum rate, exhausting all system memory and causing a kernel panic via OOM deadlock. The same zero-interval issue applies to br_mrp_start_in_test_parse() for interconnect test frames. Use NLA_POLICY_MIN(NLA_U32, 1) in the nla_policy tables for both IFLA_BRIDGE_MRP_START_TEST_INTERVAL and IFLA_BRIDGE_MRP_START_IN_TEST_INTERVAL, so zero is rejected at the netlink attribute parsing layer before the value ever reaches the workqueue scheduling code. This is consistent with how other bridge subsystems (br_fdb, br_mst) enforce range constraints on netlink attributes.
| Date | Event | Detail |
|---|---|---|
| March 9, 2026 | Reserved | Reserved by Linux |
| April 13, 2026 | Published | Published (CNA: Linux) |
| September 14, 2026 | ENRICHED | ENRICHED — CVE-2026-31420 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2026-31420 at cve.org
Vendors: linux
Weaknesses: CWE-667
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-31420 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
