CVE-2026-64537

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bridge CFM component where the ccm tx work expired() function re-arms itself using queue delayed work() based on a configured exp interval converted by interval to us(). If the exp interval is set to BR CFM CCM INTERVAL NONE or is otherwise out of range, interval to us() returns 0. This causes the worker to execute immediately in a tight loop, continuously allocating skbs (socket buffers) until the system reaches an Out-Of-Memory (OOM) state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.