CVE-2026-99031

A flaw was found in the Linux kernel's network bridge subsystem. When cleaning up multicast port entries, the kernel executes recursive function calls that consume a new stack frame for each port being removed. An attacker capable of triggering the removal of a large number of multicast ports can...

CVE-2026-98973

A flaw was found in the Linux kernel's DRM Direct Rendering Manager bridge subsystem. A local attacker could exploit a race condition in the drmbridgeadd function to cause a Denial of Service DoS through a system crash. When re-adding a previously removed display bridge, the function modifies an...

CVE-2026-98487

A flaw was found in the Linux kernel's network bridge subsystem. When deleting multicast database MDB port groups, the kernel can maintain a stale reference to memory that has already been freed during recursive group removal, resulting in a use-after-free condition. A local attacker could exploi...

CVE-2026-98301

A flaw was found in the Linux kernel's network bridge subsystem. A local user with network configuration privileges can trigger a Denial of Service DoS by updating bridge Multiple Spanning Tree MST states. Because a blocking operation is invoked within an atomic execution context that cannot safe...

CVE-2026-97615

A flaw was found in the Linux kernel's network bridge subsystem, which can lead to a Denial of Service DoS due to list corruption. When Connectivity Fault Management CFM or Media Redundancy Protocol MRP handlers are enabled across multiple network bridges, a shared data structure is improperly...

CVE-2026-98026

A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...

CVE-2026-74480

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

CVE-2026-31420

A flaw was found in the Linux kernel's bridge subsystem, specifically within the Multiple Registration Protocol MRP implementation. A local user can exploit this vulnerability by supplying a zero-value test interval through the netlink interface without proper validation. This invalid input cause...

SUSE-SU-2025:20073-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow...