CVE-2026-72389

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the bridge STP (Spanning Tree Protocol) implementation. The br topology change detection() function fails to check for the IFF UP flag, which can allow the topology change timer to be armed while the bridge is administratively down. This leads to a use-after-free condition when the bridge is subsequently deleted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.