SB20261023137 - Memory leak in Linux kernel net team driver

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-99026)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to exhaust socket write-memory resources and potentially cause a denial of service.

The vulnerability exists due to a memory leak in the Linux kernel team driver's bc_transmit() function when handling broadcast transmissions with no transmit-capable port. A local user can send AF_PACKET traffic through an affected team interface to retain unconsumed socket buffers and their socket write-memory charges, potentially exhausting resources and disrupting further transmissions.

A transmit-enabled port whose link is down keeps the broadcast transmit operation installed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/489114c9ecae44e523361a4b3e610ee5ebd9189c
• https://git.kernel.org/stable/c/961563117626f4681623077ec0cfd86f86da0d49
• https://git.kernel.org/stable/c/f34b1bcac4581a5bd3daf9eff90f175e736b54aa