CVE-2026-31675

A flaw was found in the Linux kernel's netem (network emulator) module. When processing certain non-linear network packets, specifically those sent via an AF_PACKET TX_RING over an IPIP tunnel, a calculation error can occur. This error leads to an out-of-bounds memory access, which could result in system instability or a denial of service.

NETEM corruption path could walk non-linear skbs incorrectly and read OOB. Red Hat advises patched kernels where traffic control uses sch_netem; optional mitigation is avoiding loadable sch_netem where policy allows.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the sch_netem module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.