Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in packet corruption In netem_enqueue(), the packet corruption logic uses get_random_u32_below(skb_headlen(skb)) to select an index for modifying skb->data. When an AF_PACKET TX_RING sends fully non-linear packets over an IPIP tunnel, skb_headlen(skb) evaluates to 0. Passing 0 to get_random_u32_below() takes the variable-ceil slow path which returns an unconstrained 32-bit random integer. Using this unconstrained value as an offset into skb->data results in an out-of-bounds memory access. Fix this by verifying skb_headlen(skb) is non-zero before attempting to corrupt the linear data area. Fully non-linear packets will silently bypass the corruption logic.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-25 | 2 | Disclosure1Patch1 |
| 2026-04-26 | 1 | General1 |
CVE-2026-31675 Out-of-Bounds Access in Linux Kernel net/sched sch_netem Packet Corruption https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31675
Post summary
The text announces CVE‑2026‑31675, noting an out‑of‑bounds access flaw in the Linux kernel’s net/sched sch_netem module that can cause packet corruption, but no PoC, exploit, active use, or patch details are included.
🪟 Linux netem CVE makes “just testing” features look like production traps. If your edge-case packet handling can scribble memory, congrats: your lab was never isolated. https://windowsforum.com/threads/cve-2026-31675-linux-netem-flaw-edge-case-packet-corruption-and-kernel-memory-risk.415301/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #CveRemediation #NetemSchNetem #PacketCorruption https://t.co/qlgPM899MP
Post summary
The tweet references CVE‑2026‑31675, describing it as a packet handling issue that can corrupt kernel memory, but it does not provide or link to a PoC, exploit code, active exploitation reports, patches, or debunking claims.
CVE-2026-31675 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in packet corruption In netem_enqueue(), the pack… https://www.cve.org/CVERecord?id=CVE-2026-31675
Post summary
The text announces that CVE-2026-31675, an out-of-bounds access in netem, has been fixed in the Linux kernel, indicating that a patch has been applied.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |