CVE-2026-31435

A flaw was found in the Linux kernel's netfs component. Under certain circumstances, during a read retry operation, the system may incorrectly abandon subrequests. This issue arises because a pointer (subreq) used in the abandonment process can be uninitialized or point to invalid memory. An attacker could potentially exploit this to trigger a kernel oops, leading to a system crash and a Denial of Service (DoS).

Red Hat acknowledges this defect in the upstream Linux kernel netfs read-retry path. The bug can leave subreq in an invalid state during abandonment, which may crash the kernel under specific I/O timing. Customers should consume corrected kernel builds through the usual errata when available. Exploitation requires driving the affected read path; there is no practical module unload workaround for generic netfs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.