Log in Start free

Vulnerability · Published Apr 25, 2026 · Assigned by Linux

CVE-2026-31682bridge: br_nd_send: linearize skb before parsing ND options

Critical 9.1

In plain English

A critical-severity out-of-bounds read in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.6%top 49.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing ND options br_nd_send() parses neighbour discovery options from ns->opt[] and assumes that these options are in the linear part of request. Its callers only guarantee that the ICMPv6 header and target address are available, so the option area can still be non-linear. Parsing ns->opt[] in that case can access data past the linear buffer. Linearize request before option parsing and derive ns from the linear network header.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.170-1DEBIAN-CVE-2026-31682
Debian:13linux6.12.85-1DEBIAN-CVE-2026-31682
Debian:14linux6.19.12-1DEBIAN-CVE-2026-31682
Ubuntu:22.04:LTSlinux5.15.0-185.195UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux5.15.0-185.195USN-8493-1
Ubuntu:24.04:LTSlinux6.8.0-134.134UBUNTU-CVE-2026-31682
Ubuntu:25.10linux6.17.0-40.40USN-8490-1
Ubuntu:25.10linux6.17.0-40.40UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-aws5.15.0-1111.118USN-8493-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1111.118UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-aws6.8.0-1060.63UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-aws6.17.0-1019.19USN-8490-1
Ubuntu:25.10linux-aws6.17.0-1019.19UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1019.19~24.04.1USN-8490-1
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1019.19~24.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure5.15.0-1116.125USN-8493-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1116.125UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1116.125UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gcp5.15.0-1111.121UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gcp5.15.0-1111.121USN-8493-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1063.69UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-gcp6.17.0-1020.22UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-gcp6.17.0-1020.22USN-8490-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1020.22~24.04.1USN-8490-1
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1020.22~24.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1063.69~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gke5.15.0-1107.113UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gke5.15.0-1107.113USN-8493-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1058.64UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1094.102USN-8493-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1094.102UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1045.48UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-40.40~24.04.1USN-8545-1
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-40.40~24.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-ibm5.15.0-1105.109USN-8493-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1105.109UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-ibm6.8.0-1060.61UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1060.61~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1106.112UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1106.112USN-8493-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1103.108USN-8493-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1103.108UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-183.193UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-183.193USN-8493-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-134.134.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-134.134.1~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1106.107UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1106.107USN-8493-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1058.61UBUNTU-CVE-2026-31682
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1006.6UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1026.26USN-8508-1
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1026.26UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1058.61.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1063.63UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1063.63USN-8493-1
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1029.30UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1052.52UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1052.52USN-8493-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1028.28USN-8491-1
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1028.28UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oracle5.15.0-1108.114UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oracle5.15.0-1108.114USN-8493-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1057.58UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-oracle6.17.0-1018.18UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-oracle6.17.0-1018.18USN-8490-1
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1018.18~24.04.1USN-8490-1
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1018.18~24.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1057.58~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-raspi5.15.0-1105.108USN-8527-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1105.108UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-raspi6.8.0-1060.64UBUNTU-CVE-2026-31682
Ubuntu:25.10linux-raspi6.17.0-1021.21USN-8546-1
Ubuntu:25.10linux-raspi6.17.0-1021.21UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-31682
Ubuntu:25.10linux-realtime6.17.0-1017.19USN-8490-2
Ubuntu:25.10linux-realtime6.17.0-1017.19UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-31682
Ubuntu:25.10linux-riscv6.17.0-40.40.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-134.134~22.04.1UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-31682
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-31682
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1074.78USN-8528-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1074.78UBUNTU-CVE-2026-31682

Affected products (as reported)

VendorProductVersions
Linux Linux ed842faeb2bd49256f00485402f3113205f91d30 – before c68433fd291c9e88c00292095172c62d1997d662ed842faeb2bd49256f00485402f3113205f91d30 – before 4f397b950c916e9a1f8a4fce04ea0110206cad47ed842faeb2bd49256f00485402f3113205f91d30 – before bd91ec85aa4c77d645bd2739fc56784157a88ca2ed842faeb2bd49256f00485402f3113205f91d30 – before 658261898130da620fc3d0fbb0523efb3366cb55ed842faeb2bd49256f00485402f3113205f91d30 – before 2ba4caba423ed94d63006eb1d2227b0332ab7fcded842faeb2bd49256f00485402f3113205f91d30 – before 9c55e41c73af5c4511070933b1bd25248521270ced842faeb2bd49256f00485402f3113205f91d30 – before 3a30f6469b058574f49efde61cd6f5d79e576053ed842faeb2bd49256f00485402f3113205f91d30 – before a01aee7cafc575bb82f5529e8734e7052f9b16ea
Linux Linux 4.15

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References