PULSE
FEED
← Todos os CVEs
CVE Watch30 de out. de 2026

CVE-2026-99031

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_de

CVSS

—

Sem CVSS

EPSS

0.2%

p7

KEV

—

Exploit Today

2

0-100

Publicado: 23 de out. de 2026 · Última mod.: 30 de out. de 2026

EPSS · 30d
0.2%EPSS · 30 dias0.2%
2026-10-252026-11-07
Descrição técnica

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_del_exclude_ports() removes automatically added STAR_EXCL port groups by calling br_multicast_del_pg(). For S,G entries, that deletion calls back into br_multicast_sg_del_exclude_ports(), so a large number of STAR_EXCL ports consumes one kernel stack frame per port and can hit the stack guard page. Keep the complete port-group deletion path for cleanup, but suppress the S,G exclude-port cleanup while that helper is already walking the same entry. Normal deletion callers retain the existing behavior.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.