CVE-2026-99031

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: avoid recursive multicast port cleanup

br multicast sg del exclude ports() removes automatically added STAR EXCL port groups by calling br multicast del pg(). For S,G entries, that deletion calls back into br multicast sg del exclude ports(), so a large number of STAR EXCL ports consumes one kernel stack frame per port and can hit the stack guard page.

Keep the complete port-group deletion path for cleanup, but suppress the S,G exclude-port cleanup while that helper is already walking the same entry. Normal deletion callers retain the existing behavior.