CVE-2026-31411

A flaw was found in the Linux kernel's Asynchronous Transfer Mode (ATM) networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading to the dereference of an arbitrary memory address. The consequence is a system crash, resulting in a Denial of Service (DoS).

Red Hat has evaluated this issue as having a security impact of Moderate because exploitation requires local system access and is restricted to crashing the operating system on hosts utilizing legacy ATM networking. Asynchronous Transfer Mode is an obsolete networking technology that is not active or deployed in typical enterprise environments, significantly limiting the real-world attack surface. An attacker with local access must interact directly with the signaling daemon interface to cause the unvalidated pointer dereference, resulting in a denial of service without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.