CVE-2026-31682

A flaw was found in the Linux kernel's bridge component. This vulnerability occurs because the system does not properly prepare network packet data before processing Neighbor Discovery (ND) options. An attacker could exploit this by sending specially crafted network packets, causing the system to read sensitive information from unintended memory locations or crash the system, leading to a denial of service.

Bridge ND transmission must linearize skbs before parsing options; otherwise non-linear layout can confuse ND option walkers. Red Hat recommends patched kernels for Linux bridge deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bridge module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.