CVE-2026-31674

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the ip6t_rt module. This vulnerability occurs when processing IPv6 routing header (RT) match rules with an oversized address number (addrnr). A local attacker could exploit this by crafting a malicious netfilter rule, leading to an out-of-bounds memory access. This could result in a denial of service, causing the system to crash or become unresponsive.

IPv6 routing-header match parsing now rejects oversized addrnr, preventing skb overruns in rt_mt6_check(). Red Hat recommends updated kernels on hosts using ip6tables RT matches.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.