CVE-2026-90114

This Linux kernel vulnerability affects the net: bridge subsystem. A pair of descending VLAN and tunnel IDs can pass the tunnel range span check because the VLAN subtraction produces a negative signed int, which is implicitly converted to unsigned when compared against the u32 tunnel ID delta. Wh...