Null Pointer Dereference Vulnerability in Linux Kernel Bridge Functionality

CVE-2026-43100

What is CVE-2026-43100?

A vulnerability exists in the Linux Kernel bridge functionality, specifically in the handling of VLAN groups. When the VLAN filtering configuration is disabled, certain bridge helper functions can return a NULL pointer, leading to dereferencing of this pointer in critical operations. This can cause system crashes, especially when manipulating VLAN settings. To mitigate this issue, it is advised to implement NULL pointer checks in the impacted functions, ensuring that operations only proceed when valid VLAN groups exist.

References