CVE-2026-31774

A flaw was found in the Linux kernel's io_uring networking component. A local attacker could exploit an integer overflow vulnerability by providing a specially crafted length value. This issue leads to a slab-out-of-bounds read, which could allow for information disclosure or potentially cause a denial of service (DoS) by making the system unresponsive.

io_bundle_nbufs() could read slab out of bounds when bundling network buffers under io_uring. Red Hat advises io_uring users to update kernels; io_uring is core infrastructure without a simple unload mitigation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.