CVE-2026-63988

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bridge component where the brport store() function acquires the bridge lock for all attributes. This causes a problem when certain bridge port flags change, as the bridge calls dev set promiscuity(), a function that can sleep. Calling a sleeping function while holding a spinlock occurs in an atomic context, which can lead to a system crash or kernel panic (splat).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.