Linux Kernel - Mobile Bridge Functionality Vulnerability

CVE-2026-63988

What is CVE-2026-63988?

A vulnerability in the Linux kernel's bridge component allows improper use of locking mechanisms in specific functions, leading to potential system instability. The affected function, brport_store(), initially designed to manage bridge attributes, has expanded in its scope. This change requires a detailed revision of how locks are handled during operations. If the bridge locks are not correctly scoped, it can result in an operation that leads to sleeping in an invalid context, severely impacting system performance and reliability.

References