Linux Kernel Vulnerability in Neighbor Discovery Option Parsing

CVE-2026-31682

What is CVE-2026-31682?

A vulnerability exists in the Linux kernel's neighbor discovery mechanism, specifically within the br_nd_send() function. This issue arises when the function attempts to parse neighbor discovery options from a non-linear buffer, leading to potential access of memory beyond allocated limits. The vulnerability manifests when only the ICMPv6 header and target address are guaranteed to be available, allowing attackers to exploit the parsing of neighbor discovery options. To mitigate this risk, requests should be linearized prior to parsing, ensuring that the integrity of network header data is maintained.

References