CVE-2026-98285: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in __vlan_del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL pointer dereference on bridge error when flushing. It doesn't make sense to allow it to stop __vlan_del, so log the error and continue with software vlan deletion. This is also consistent with 8021q behaviour.

Засегнати продукти

• Linux Linux: bf361ad38165939049a2649b1a0078f3268d4bd1 преди ed3ea86db736a30bebf49b947c42730e8451bcd2; bf361ad38165939049a2649b1a0078f3268d4bd1 преди 2842ce397dd09882530b42f7fdb0c855767eb24e
• Linux Linux: 4.3; преди 4.3; 7.2.8 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98285
• https://nvd.nist.gov/vuln/detail/CVE-2026-98285
• https://git.kernel.org/stable/c/ed3ea86db736a30bebf49b947c42730e8451bcd2
• https://git.kernel.org/stable/c/2842ce397dd09882530b42f7fdb0c855767eb24e