CVE-2026-64032

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the bridge component when removing a bridge port. This occurs when both per-port and per-{port, VLAN} multicast contexts are enabled on a single bridge port simultaneously. Specifically, the br multicast disable port() function may fail to disable the per-port multicast context if per-VLAN multicast snooping is enabled, leaving the context active while the bridge port is being freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.