18 matches found
EUVD-2026-112017
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...
CVE-2026-99117 net: bridge: mcast: don't truncate the port group walk on teardown
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...
CVE-2026-99117
A flaw in the Linux kernel's network bridge multicast subsystem allows a use-after-free condition. During network bridge port removal, the cleanup process in __br_multicast_disable_port_ctx() and br_multicast_del_port() can terminate early if an entry is deleted by br_multicast_find_del_pg(), lea...
CVE-2026-99117 net: bridge: mcast: don't truncate the port group walk on teardown
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...
SUSE CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142561)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142561 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143082)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143082 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports...
DEBIAN-CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
UBUNTU-CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
EUVD-2026-103727
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-98487 net: bridge: mdb: restart port group walk after deletion
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-98487
The Linux kernel 's network bridge subsystem contains a use-after-free vulnerability in the multicast database (MDB) handling. Specifically, the function br_mdb_flush_pgs() maintains a pointer-to-pointer cursor while traversing mp->ports. During recursive removal in br_multicast_del_pg(), the ...
CVE-2026-98487 net: bridge: mdb: restart port group walk after deletion
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-98487: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter the same MDB entry through brmulticastsgdelexcludeports and unlink oth...
CVE-2026-74480 net: bridge: stop fast-leave after deleting a port group
In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...
CVE-2026-74480: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...