SB20260928321 - Improper control of a resource through its lifetime in Linux kernel bridge

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-97615)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to corrupt list state on another bridge.

The vulnerability exists due to reuse of a global frame-type handler list node in the Linux bridge CFM and MRP frame handlers when enabling a protocol on multiple bridges and unregistering it on one bridge. A local privileged user can create protocol instances on multiple bridges and remove an instance from one bridge to corrupt list state on another bridge.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/42e033c8f30fd2923ccac3373ae70797e521dae1
• https://git.kernel.org/stable/c/7a49e6b16f36b8e085521699adbca3e321b6dd0c
• https://git.kernel.org/stable/c/994fd705ca498223d188024cde833739a9dddbd2