CVE-2026-31502

A flaw was found in the Linux kernel's team network device. This vulnerability involves a type confusion in header operations when handling non-Ethernet ports. An attacker could potentially exploit this by causing the team device to misinterpret network device private data, leading to a system crash and a Denial of Service (DoS).

Because the use of the team driver with non-Ethernet ports is rare, and because such a configuration would immediately cause a system fault, Red Hat rates the impact of this flaw as Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

A workaround for this issue is to avoid using the team driver with non-Ethernet ports: ensure that team devices only enslave Ethernet ports, and avoid stacked non-Ethernet topologies (for example, GRE tunnels or bonding devices beneath a team device), as the type confusion occurs only when team header operations run on behalf of non-Ethernet ports. In addition, restricting local privileged access, in particular network administration capabilities (for example, CAP_NET_ADMIN in the relevant network namespace), limits the ability to create the triggering topology.