CVE-2026-97419

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the High-availability Seamless Redundancy (HSR) generic netlink family where notifications are incorrectly broadcast. The functions hsr nl ringerror() and hsr nl nodedown() use genlmsg multicast(), which delivers events only to the default generic netlink socket in the init net network namespace, regardless of the device's actual namespace. This results in listeners within the device's own namespace failing to receive ring error and node down events, while a privileged listener in init net can receive events from HSR devices located in other namespaces. The affected payload includes the peer node MAC HSR A NODE ADDR and the slave port ifindex HSR A IFINDEX.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.