CVE-2026-68301

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs during the unregistration of a slave device while High-availability Seamless Redundancy (HSR) is active. When an HSR master device is activated, it automatically adds VLAN 0, which is propagated to slave devices. If a slave device is unregistered (for example, during interface destruction or network namespace cleanup), the hsr del port() function fails to delete the synced VLAN IDs. Consequently, the slave device maintains a reference count on the VLAN IDs, causing the vlan info and vlan vid info structures to remain allocated after the device is destroyed.

Recommendations As a temporary mitigation, restrict the unregistration of slave devices while HSR is active until the system is updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.