CVE-2026-90114

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bridge network component where descending VLAN and tunnel IDs can bypass the tunnel range span check. This occurs because the VLAN subtraction results in a negative integer that is converted to an unsigned value when compared to the u32 tunnel ID subtraction, potentially matching the wrapped tunnel ID delta. Consequently, the range loop does not execute, leaving the err variable uninitialized and causing the request return value to be unpredictable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.