Log in Start free

Vulnerability · Published Oct 23, 2026 · Assigned by Linux

CVE-2026-99031net: bridge: avoid recursive multicast port cleanup

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 92.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_del_exclude_ports() removes automatically added STAR_EXCL port groups by calling br_multicast_del_pg(). For S,G entries, that deletion calls back into br_multicast_sg_del_exclude_ports(), so a large number of STAR_EXCL ports consumes one kernel stack frame per port and can hit the stack guard page. Keep the complete port-group deletion path for cleanup, but suppress the S,G exclude-port cleanup while that helper is already walking the same entry. Normal deletion callers retain the existing behavior.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-99031
Debian:13linux6.12.113-1DEBIAN-CVE-2026-99031
Debian:14linux7.2.11-1DEBIAN-CVE-2026-99031
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux7.3.0-10.10UBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-aws7.3.0-1004.4UBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-azureno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-gcp7.3.0-1004.4UBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-oracle7.3.0-1004.4UBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-raspi7.3.0-1004.4UBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-realtime7.3.0-10.10.1UBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99031
Ubuntu:26.10linux-riscv7.3.0-10.10.1UBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-99031
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-99031
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-99031

Affected products (as reported)

VendorProductVersions
Linux Linux 8266a0491e92d39dc9af739e8380a0daa9b8836b – before 0ed8edcbcf2290dba13c1beeba27fc19ad38515b8266a0491e92d39dc9af739e8380a0daa9b8836b – before 6a7385f6605958aa69eeb185c91f45d77640d1e28266a0491e92d39dc9af739e8380a0daa9b8836b – before 26142868b0767e95e28b7a1237f58b292b54d1d98266a0491e92d39dc9af739e8380a0daa9b8836b – before 695a5a4c69c922d9296b2d7ad5f1ce8c6858fc648266a0491e92d39dc9af739e8380a0daa9b8836b – before 2fb87c6025f90191516bee3ce14b42eb3e1cfed78266a0491e92d39dc9af739e8380a0daa9b8836b – before d109141ba14652146089ef78b32d5e4d5285ebad8266a0491e92d39dc9af739e8380a0daa9b8836b – before 7931fb9181421953f3133b408b0f2e2b8dd68b618266a0491e92d39dc9af739e8380a0daa9b8836b – before 5158353121bae4f552cb677ce8c5c3ef52f93a0d
Linux Linux 5.10

References