CVE-2026-98487 net: bridge: mdb: restart port group walk after deletion

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...

CVE-2026-98487

The Linux kernel is affected by a slab-use-after-free vulnerability in the network bridge multicast database (mdb ) component. The issue occurs in br_mdb_flush_pgs() when it maintains a pointer-to-pointer cursor while walking mp->ports. If br_multicast_del_pg() re-enters the same MDB entry via...

EUVD-2026-103727

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...