Linux Kernel Vulnerability in mv88e6xxx Switch Chip Affecting Bridge VLAN Deletion

CVE-2025-37865

Summary

A flaw has been identified in the Linux kernel affecting the mv88e6xxx switch chip during the deletion of bridge VLANs. The issue arises when the user port attempts to remove a VLAN that does not support Multiple Spanning Tree (MST), leading to a failure denoted by -ENOENT. The underlying cause is that the VLAN’s identification (sid) is not correctly populated in certain chip implementations, resulting in the invocation of uninitialized memory. The fix involves adding a guard condition to handle the absence of MST support correctly, thereby preventing erroneous behavior when VLANs are managed in environments that do not support the required protocols.

References