CVE-2024-26837

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from a race condition between the generation of the list of MDB events to replay and the creation of new group memberships. This can lead to a driver receiving two copies of the same event, resulting in orphan groups in the hardware database when a bridge is destroyed. The problem occurs when replaying additions, and it can cause old group memberships to be reanimated in hardware when a port joins a new bridge without the new bridge's knowledge.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.