CVE-2026-98285

Published: October 9, 2026Last modified: October 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in __vlan_del could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL pointer dereference on bridge error when flushing. It doesn't make sense to allow it to stop __vlan_del, so log the error and continue with software vlan deletion. This is also consistent with 8021q behaviour.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlinux-ltsVulnerable (6.1.189-r0)
25 LTSlinux-ltsVulnerable (6.12.112-r0)
Streamlinux-ltsVulnerable (6.18.55-r0)

References

ON THIS PAGE