Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43100

In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against NULL vlan group When CONFIG_BRIDGE_VLAN_FILTERING is not set, br_vlan_group() and nbp_vlan_group() return NULL (br_private.h stub definitions). The BR_BOOLOPT_FDB_LOCAL_VLAN_0 toggle code is compiled unconditionally and reaches br_fdb_delete_locals_per_vlan_port() and br_fdb_insert_locals_per_vlan_port(), where the NULL vlan group pointer is dereferenced via list_for_each_entry(v,
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1197f22de996f95a2b4460e5b3c8f679a3c6df7f4a8570bf82aead76e5c8fd53
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bridge/br_fdb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.18"},{"lessThan":"6.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.14","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bridge/br_fdb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"fb612d436ff0317659e45a91c25fd7d9516f5b1b","status":"affected","version":"21446c06b441b9c993870efae71aef4e9aa72ec7","versionType":"git"},{"lessThan":"ddf0ec2d600e7dad62b89692749534d7900a732a","status":"affected","version":"21446c06b441b9c993870efae71aef4e9aa72ec7","versionType":"git"},{"lessThan":"1979645e1842cb7017525a61a0e0e0beb924d02a","status":"affected","version":"21446c06b441b9c993870efae7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/bridge/br_fdb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.18"},{"lessThan":"6.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.14","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bridge/br_fdb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"fb612d436ff0317659e45a91c25fd7d9516f5b1b","status":"affected","version":"21446c06b441b9c993870efae71aef4e9aa72ec7","versionType":"git"},{"lessThan":"ddf0ec2d600e7dad62b89692749534d7900a732a","status":"affected","version":"21446c06b441b9c993870efae71aef4e9aa72ec7","versionType":"git"},{"lessThan":"1979645e1842cb7017525a61a0e0e0beb924d02a","status":"affected","version":"21446c06b441b9c993870efae7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/1979645e1842cb7017525a61a0e0e0beb924d02a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ddf0ec2d600e7dad62b89692749534d7900a732a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/fb612d436ff0317659e45a91c25fd7d9516f5b1b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ec49cd90aaeee046bc574152afde14b84c049f440a9a48eb17bf4a41a27298aa · sha256:a006c126fb98e55a… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer