Riskcovery

CVE-2026-98285

net: bridge: vlan: fix bugs caused by switchdev deletion errors

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: vlan: fix bugs caused by switchdev deletion errors

Allowing switchdev to prevent vlan deletion and error out in __vlan_del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL pointer dereference on bridge error when flushing. It doesn't make sense to allow it to stop __vlan_del, so log the error and continue with software vlan deletion. This is also consistent with 8021q behaviour.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bf361ad38165939049a2649b1a0078f3268d4bd1 to before ed3ea86db736a30bebf49b947c42730e8451bcd2Affected
  • bf361ad38165939049a2649b1a0078f3268d4bd1 to before 2842ce397dd09882530b42f7fdb0c855767eb24eAffected
LinuxLinux
  • 4.3Affected
  • before 4.3Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.