CVE-2026-23393

A flaw was found in the Linux kernel's bridge Connectivity Fault Management (CFM) component. A race condition can occur during the deletion of a peer Maintenance Entity Group End Point (MEP). This allows the br_cfm_frame_rx() function to re-schedule a delayed work on a MEP object after it has been marked for deletion but before it is fully freed. This may lead to a use-after-free vulnerability, potentially causing a denial of service or arbitrary code execution.