CVE-2026-31682Disclosure(linux / linux_kernel)

LOWCVSS 9.1 · CRITICAL

Exploitation observed; activity peaked at 4 mentions and remains active

Immediate actions

Prioritize remediation for linux linux_kernel systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing ND options br_nd_send() parses neighbour discovery options from ns->opt[] and assumes that these options are in the linear part of request. Its callers only guarantee that the ICMPv6 header and target address are available, so the option area can still be non-linear. Parsing ns->opt[] in that case can access data past the linear buffer. Linearize request before option parsing and derive ns from the linear network header.

linux CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Patch / fix

Other references

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel

Threat summary

Active exploitation appears in 1 classified signals
5 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-04-25); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

linux

Products

linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 2d

Signal classification3 categories

Disclosure

360.0%

Active Exploitation

120.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-25	4	Active Exploitation1Disclosure2General1
2026-04-28	1	Disclosure1

Full discourse5 posts

إبراهيم بوحيمد | Ibrahim Buhaimed@buhaimedi164d
Disclosure
🔴 الثغرة الثانية: (CVE-2026-31682) | التقييم: 9.1 (حرج جداً) 🌐 نوع الهجوم: هجوم عن بُعد (Remote Attack).⚙️ وصف الثغرة: النظام يفشل في تنظيم البيانات القادمة إليه عبر الشبكة بشكل صحيح؛ حيث يتوقع أن تكون مرتبة بطريقة معينة، فإذا أرسل المهاجم بيانات مشتتة، يضطرب النظام ويحاول قراءة بيانات خارج النطاق المسموح له. 🎯 النتيجة: تعطل النظام فوراً أو تسريب بيانات تقنية للمخترق.
Post summary
The post discloses CVE-2026-31682, a high-severity (9.1) remote vulnerability caused by improper handling of network data, which can crash the system or expose sensitive information.
100811.8K
49.3K followersView on X
VulDB 🛡@vuldb167d
Active Exploitation
Our CTI team identified a lot of activities targeting Linux Kernel (CVE-2026-31682) https://vuldb.com/vuln/359580/cti
Post summary
CTI reports ongoing attacks against Linux Kernel CVE-2026-31682 but provides no PoC, exploitation code, or patch information.
0101183
2.1K followersView on X
VulDB 🛡@vuldb168d
Disclosure
We have just added an important vulnerability affecting Linux Kernel (CVE-2026-31682) https://vuldb.com/vuln/359580
Post summary
The post announces the addition of CVE-2026-31682 to a vulnerability database, but offers no technical, exploit, or mitigation details.
01010105
2.1K followersView on X
CVE@CVEnew167d
Disclosure
CVE-2026-31682 In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing ND options br_nd_send() parses neighbour discov… https://www.cve.org/CVERecord?id=CVE-2026-31682
Post summary
The text announces that CVE‑2026‑31682, a Linux kernel vulnerability affecting br_nd_send, has been fixed, providing some technical details but no PoC, exploit, or patch information.
0000074
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds168d
General
CVE-2026-31682 Linux Kernel Bridge ND Options Parsing Information Disclosure Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31682
Post summary
The entry provides a brief CVE reference and a link, noting a Linux kernel information disclosure vulnerability, but lacks deeper technical or operational details.
0000050
4.0K followersView on X

CPE platform detail7 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

7 of 7 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-

Explore more

Back to dashboard linux CVEs linux_kernel vulnerabilities

What researchers are saying

CVE-2026-31682

إبراهيم بوحيمد | Ibrahim Buhaimed[verified]@buhaimediDisclosure

The post discloses CVE-2026-31682, a high-severity (9.1) remote vulnerability caused by improper handling of network data, which can crash the system or expose sensitive information.

VulDB 🛡@vuldbActive Exploitation

CTI reports ongoing attacks against Linux Kernel CVE-2026-31682 but provides no PoC, exploitation code, or patch information.

VulDB 🛡@vuldbDisclosure

The post announces the addition of CVE-2026-31682 to a vulnerability database, but offers no technical, exploit, or mitigation details.

CVE@CVEnewDisclosure

The text announces that CVE‑2026‑31682, a Linux kernel vulnerability affecting br_nd_send, has been fixed, providing some technical details but no PoC, exploit, or patch information.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The entry provides a brief CVE reference and a link, noting a Linux kernel information disclosure vulnerability, but lacks deeper technical or operational details.