SB20260528158 - Improper control of a resource through its lifetime in Linux kernel bridge

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260528158

SB20260528158 - Improper control of a resource through its lifetime in Linux kernel bridge

Published: May 28, 2026

Security Bulletin ID SB20260528158
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-45913)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper state management in the bridge multicast database handling for vlan contexts when processing multicast database flush operations after bridge and multicast snooping configuration changes. A local user can trigger inconsistent mdb entry accounting to cause a denial of service.

The issue can be triggered by creating multicast database entries on a bridge with vlan filtering enabled and then changing multicast snooping state before flushing entries.


Remediation

Install update from vendor's website.

References