CVE-2026-31752

A flaw was found in the Linux kernel's bridge module. A remote attacker could exploit this by sending a malformed Neighbor Discovery (ND) option. This could cause the br_nd_send() function to improperly process option lengths, potentially leading to information disclosure or a denial of service (DoS).

Bridge ND transmission must validate option lengths before walking skb data (related hardening to earlier linearize fixes). Red Hat advises bridge users to take networking kernel updates; unload bridge if bridging is not required.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bridge module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.