CVE-2026-31438

A flaw was found in the Linux kernel's netfs component. When a process crashes and the kernel attempts to write a core dump to a 9P filesystem, the netfs_limit_iter() function does not properly handle ITER_KVEC iterators. This oversight can lead to a kernel BUG, resulting in a system crash and a Denial of Service (DoS) for the affected system.

Upstream corrected netfs iterator handling so core dumps to 9P-backed storage no longer hit a deliberate BUG() in netfs_limit_iter(). Red Hat treats this as a local availability issue tied to that uncommon configuration. Apply updated kernels when published. No discrete loadable-module mitigation applies to netfs itself.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.