PT-2026-37410 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-43100

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the bridge component when CONFIG BRIDGE VLAN FILTERING is not set. In this configuration, the functions br vlan group() and nbp vlan group() return NULL. The BR BOOLOPT FDB LOCAL VLAN 0 toggle code can reach the functions br fdb delete locals per vlan port() and br fdb insert locals per vlan port(), where the NULL vlan group pointer is dereferenced during a list iteration. This issue can be triggered when creating a bridge with IFLA BR MULTI BOOLOPT containing BR BOOLOPT FDB LOCAL VLAN 0 via RTM NEWLINK.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43100

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-43100 · Security Note
• https://git.kernel.org/stable/c/ddf0ec2d600e7dad62b89692749534d7900a732a · Note
• https://git.kernel.org/stable/c/1979645e1842cb7017525a61a0e0e0beb924d02a · Note
• https://git.kernel.org/stable/c/fb612d436ff0317659e45a91c25fd7d9516f5b1b · Note
• https://twitter.com/VulmonFeeds/status/2052025786467496096 · Twitter Post