CVE-2026-100071

A flaw was found in the Linux kernel's High-availability Seamless Redundancy (HSR) networking subsystem. When device initialization fails after network receive handlers have already been registered, frames received during this setup window can create dynamic node entries that are not properly released during error cleanup. An attacker sending network traffic during a failed device setup could exploit this flaw to cause a memory leak, potentially resulting in kernel resource exhaustion and a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.