CVE-2026-99117

A flaw was found in the Linux kernel's network bridge multicast subsystem. During network bridge port removal, the cleanup process can terminate prematurely, leaving behind orphaned records pointing to deallocated memory. A local attacker with network administration privileges can trigger this flaw to cause a use-after-free condition, where the operating system attempts to access memory that has already been released. This flaw primarily leads to a system crash resulting in a Denial of Service (DoS), and could potentially enable memory corruption or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.