CVE-2026-68301

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68301", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.380Z", "datePublished": "2026-08-10T12:02:35.155Z", "dateUpdated": "2026-11-06T16:55:12.377Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-19T16:32:53.463Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: fix memory leak on slave unregistration by removing synced VLANs\n\nWhen an HSR master device is brought UP, it auto-adds VLAN 0 via\nvlan_vid0_add(), which propagates VID 0 to its slave devices (slave A and B).\n\nIf a slave device is later unregistered while HSR is active (e.g., during\nnetns cleanup or interface destruction), hsr_del_port() is called to\ndetach the slave port from the HSR master. However, hsr_del_port() currently\ndoes not delete the VLAN IDs that were synced to the slave device by HSR.\n\nAs a result, the slave device retains a refcount on VID 0 (and any other\nsynced VLANs). When the slave device is destroyed, its vlan_info /\nvlan_vid_info structure remains allocated, leading to a memory leak.\n\nFix this by calling vlan_vids_del_by_dev(port->dev, master->dev) in\nhsr_del_port() before unlinking slave A or slave B ports, matching the\npropagation logic in hsr_ndo_vlan_rx_add_vid() / hsr_ndo_vlan_rx_kill_vid()\nand the cleanup behavior in bonding and team drivers."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/hsr/hsr_slave.c"], "versions": [{"version": "1100242709d5644856131a9dd25d32672ebe7357", "lessThan": "ccc822e9e4f09a6c2ca73ad5334570441947f94f", "status": "affected", "versionType": "git"}, {"version": "a2accc07bdcfb0c7ab2cacdca6a1fe8267816efa", "lessThan": "79ff0547676acdeceda445c3fce4071b0a887b70", "status": "affected", "versionType": "git"}, {"version": "72dbae1f2f2159395089405c6c54632f2613f1be", "lessThan": "f72c312af6c7897ab0f8a2b5a63f917a207a4143", "status": "affected", "versionType": "git"}, {"version": "c707d2c5541d2bb94131968ad5dfeb06427a1dba", "lessThan": "21d48408479a17eb65568a765930adea37e4d804", "status": "affected", "versionType": "git"}, {"version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "b5ded444621b6180df9f3d4e07045fc1fc1e8cd9", "status": "affected", "versionType": "git"}, {"version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "ae995b8002d3af134560a706c0e111a89e26317c", "status": "affected", "versionType": "git"}, {"version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "dcf15eaf5641812f1cfc5e96537380132a7da89d", "status": "affected", "versionType": "git"}, {"version": "5.15.194", "lessThan": "5.15.216", "status": "affected", "versionType": "semver"}, {"version": "6.1.153", "lessThan": "6.1.183", "status": "affected", "versionType": "semver"}, {"version": "6.6.107", "lessThan": "6.6.148", "status": "affected", "versionType": "semver"}, {"version": "6.12.48", "lessThan": "6.12.101", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/hsr/hsr_slave.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.216", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.183", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.194", "versionEndExcluding": "5.15.216"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.153", "versionEndExcluding": "6.1.183"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.107", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.48", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ccc822e9e4f09a6c2ca73ad5334570441947f94f"}, {"url": "https://git.kernel.org/stable/c/79ff0547676acdeceda445c3fce4071b0a887b70"}, {"url": "https://git.kernel.org/stable/c/f72c312af6c7897ab0f8a2b5a63f917a207a4143"}, {"url": "https://git.kernel.org/stable/c/21d48408479a17eb65568a765930adea37e4d804"}, {"url": "https://git.kernel.org/stable/c/b5ded444621b6180df9f3d4e07045fc1fc1e8cd9"}, {"url": "https://git.kernel.org/stable/c/ae995b8002d3af134560a706c0e111a89e26317c"}, {"url": "https://git.kernel.org/stable/c/dcf15eaf5641812f1cfc5e96537380132a7da89d"}], "title": "net: hsr: fix memory leak on slave unregistration by removing synced VLANs", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-68301", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:46:46.689582Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:55:12.377Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-68301", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:46:46.689582Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:46:47.939Z"}}], "cna": {"title": "net: hsr: fix memory leak on slave unregistration by removing synced VLANs", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1100242709d5644856131a9dd25d32672ebe7357", "lessThan": "ccc822e9e4f09a6c2ca73ad5334570441947f94f", "versionType": "git"}, {"status": "affected", "version": "a2accc07bdcfb0c7ab2cacdca6a1fe8267816efa", "lessThan": "79ff0547676acdeceda445c3fce4071b0a887b70", "versionType": "git"}, {"status": "affected", "version": "72dbae1f2f2159395089405c6c54632f2613f1be", "lessThan": "f72c312af6c7897ab0f8a2b5a63f917a207a4143", "versionType": "git"}, {"status": "affected", "version": "c707d2c5541d2bb94131968ad5dfeb06427a1dba", "lessThan": "21d48408479a17eb65568a765930adea37e4d804", "versionType": "git"}, {"status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "b5ded444621b6180df9f3d4e07045fc1fc1e8cd9", "versionType": "git"}, {"status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "ae995b8002d3af134560a706c0e111a89e26317c", "versionType": "git"}, {"status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "lessThan": "dcf15eaf5641812f1cfc5e96537380132a7da89d", "versionType": "git"}, {"status": "affected", "version": "5.15.194", "lessThan": "5.15.216", "versionType": "semver"}, {"status": "affected", "version": "6.1.153", "lessThan": "6.1.183", "versionType": "semver"}, {"status": "affected", "version": "6.6.107", "lessThan": "6.6.148", "versionType": "semver"}, {"status": "affected", "version": "6.12.48", "lessThan": "6.12.101", "versionType": "semver"}], "programFiles": ["net/hsr/hsr_slave.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"status": "unaffected", "version": "0", "lessThan": "6.13", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.148", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.101", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.42", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/hsr/hsr_slave.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/ccc822e9e4f09a6c2ca73ad5334570441947f94f"}, {"url": "https://git.kernel.org/stable/c/79ff0547676acdeceda445c3fce4071b0a887b70"}, {"url": "https://git.kernel.org/stable/c/f72c312af6c7897ab0f8a2b5a63f917a207a4143"}, {"url": "https://git.kernel.org/stable/c/21d48408479a17eb65568a765930adea37e4d804"}, {"url": "https://git.kernel.org/stable/c/b5ded444621b6180df9f3d4e07045fc1fc1e8cd9"}, {"url": "https://git.kernel.org/stable/c/ae995b8002d3af134560a706c0e111a89e26317c"}, {"url": "https://git.kernel.org/stable/c/dcf15eaf5641812f1cfc5e96537380132a7da89d"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: fix memory leak on slave unregistration by removing synced VLANs\n\nWhen an HSR master device is brought UP, it auto-adds VLAN 0 via\nvlan_vid0_add(), which propagates VID 0 to its slave devices (slave A and B).\n\nIf a slave device is later unregistered while HSR is active (e.g., during\nnetns cleanup or interface destruction), hsr_del_port() is called to\ndetach the slave port from the HSR master. However, hsr_del_port() currently\ndoes not delete the VLAN IDs that were synced to the slave device by HSR.\n\nAs a result, the slave device retains a refcount on VID 0 (and any other\nsynced VLANs). When the slave device is destroyed, its vlan_info /\nvlan_vid_info structure remains allocated, leading to a memory leak.\n\nFix this by calling vlan_vids_del_by_dev(port->dev, master->dev) in\nhsr_del_port() before unlinking slave A or slave B ports, matching the\npropagation logic in hsr_ndo_vlan_rx_add_vid() / hsr_ndo_vlan_rx_kill_vid()\nand the cleanup behavior in bonding and team drivers."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.216", "versionStartIncluding": "5.15.194"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.183", "versionStartIncluding": "6.1.153"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.148", "versionStartIncluding": "6.6.107"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.101", "versionStartIncluding": "6.12.48"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.42", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.6", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2", "versionStartIncluding": "6.13"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-19T16:32:53.463Z"}}}, "cveMetadata": {"cveId": "CVE-2026-68301", "state": "PUBLISHED", "dateUpdated": "2026-11-06T16:55:12.377Z", "dateReserved": "2026-07-30T09:28:09.380Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-08-10T12:02:35.155Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/hsr/hsr_slave.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "ccc822e9e4f09a6c2ca73ad5334570441947f94f", "status": "affected", "version": "1100242709d5644856131a9dd25d32672ebe7357", "versionType": "git"}, {"lessThan": "79ff0547676acdeceda445c3fce4071b0a887b70", "status": "affected", "version": "a2accc07bdcfb0c7ab2cacdca6a1fe8267816efa", "versionType": "git"}, {"lessThan": "f72c312af6c7897ab0f8a2b5a63f917a207a4143", "status": "affected", "version": "72dbae1f2f2159395089405c6c54632f2613f1be", "versionType": "git"}, {"lessThan": "21d48408479a17eb65568a765930adea37e4d804", "status": "affected", "version": "c707d2c5541d2bb94131968ad5dfeb06427a1dba", "versionType": "git"}, {"lessThan": "b5ded444621b6180df9f3d4e07045fc1fc1e8cd9", "status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "versionType": "git"}, {"lessThan": "ae995b8002d3af134560a706c0e111a89e26317c", "status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "versionType": "git"}, {"lessThan": "dcf15eaf5641812f1cfc5e96537380132a7da89d", "status": "affected", "version": "1a8a63a5305e95519de6f941922dfcd8179f82e5", "versionType": "git"}, {"lessThan": "5.15.216", "status": "affected", "version": "5.15.194", "versionType": "semver"}, {"lessThan": "6.1.183", "status": "affected", "version": "6.1.153", "versionType": "semver"}, {"lessThan": "6.6.148", "status": "affected", "version": "6.6.107", "versionType": "semver"}, {"lessThan": "6.12.101", "status": "affected", "version": "6.12.48", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/hsr/hsr_slave.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"lessThan": "6.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.216", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.183", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: fix memory leak on slave unregistration by removing synced VLANs\n\nWhen an HSR master device is brought UP, it auto-adds VLAN 0 via\nvlan_vid0_add(), which propagates VID 0 to its slave devices (slave A and B).\n\nIf a slave device is later unregistered while HSR is active (e.g., during\nnetns cleanup or interface destruction), hsr_del_port() is called to\ndetach the slave port from the HSR master. However, hsr_del_port() currently\ndoes not delete the VLAN IDs that were synced to the slave device by HSR.\n\nAs a result, the slave device retains a refcount on VID 0 (and any other\nsynced VLANs). When the slave device is destroyed, its vlan_info /\nvlan_vid_info structure remains allocated, leading to a memory leak.\n\nFix this by calling vlan_vids_del_by_dev(port->dev, master->dev) in\nhsr_del_port() before unlinking slave A or slave B ports, matching the\npropagation logic in hsr_ndo_vlan_rx_add_vid() / hsr_ndo_vlan_rx_kill_vid()\nand the cleanup behavior in bonding and team drivers."}], "id": "CVE-2026-68301", "lastModified": "2026-11-06T17:19:28.183", "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-68301", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:46:46.689582Z", "version": "2.0.3"}}]}, "published": "2026-08-10T13:20:19.680", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/21d48408479a17eb65568a765930adea37e4d804"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/79ff0547676acdeceda445c3fce4071b0a887b70"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ae995b8002d3af134560a706c0e111a89e26317c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b5ded444621b6180df9f3d4e07045fc1fc1e8cd9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ccc822e9e4f09a6c2ca73ad5334570441947f94f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dcf15eaf5641812f1cfc5e96537380132a7da89d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f72c312af6c7897ab0f8a2b5a63f917a207a4143"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: hsr: fix memory leak on slave unregistration by removing synced VLANs", "id": "2513154", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513154"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: hsr: fix memory leak on slave unregistration by removing synced VLANs\nWhen an HSR master device is brought UP, it auto-adds VLAN 0 via\nvlan_vid0_add(), which propagates VID 0 to its slave devices (slave A and B).\nIf a slave device is later unregistered while HSR is active (e.g., during\nnetns cleanup or interface destruction), hsr_del_port() is called to\ndetach the slave port from the HSR master. However, hsr_del_port() currently\ndoes not delete the VLAN IDs that were synced to the slave device by HSR.\nAs a result, the slave device retains a refcount on VID 0 (and any other\nsynced VLANs). When the slave device is destroyed, its vlan_info /\nvlan_vid_info structure remains allocated, leading to a memory leak.\nFix this by calling vlan_vids_del_by_dev(port->dev, master->dev) in\nhsr_del_port() before unlinking slave A or slave B ports, matching the\npropagation logic in hsr_ndo_vlan_rx_add_vid() / hsr_ndo_vlan_rx_kill_vid()\nand the cleanup behavior in bonding and team drivers.", "A flaw was found in the Linux kernel's High-availability Seamless Redundancy (HSR) networking module. When an HSR slave device is unregistered, the system fails to properly remove synced Virtual Local Area Networks (VLANs). This oversight causes the slave device to retain a reference count on these VLANs, leading to a memory leak. A local attacker could potentially exploit this to cause resource exhaustion."], "name": "CVE-2026-68301", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68301\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68301\nhttps://lore.kernel.org/linux-cve-announce/2026081029-CVE-2026-68301-873d@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[72dbae1f2f2159395089405c6c54632f2613f1be,f72c312af6c7897ab0f8a2b5a63f917a207a4143)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c707d2c5541d2bb94131968ad5dfeb06427a1dba,21d48408479a17eb65568a765930adea37e4d804)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1a8a63a5305e95519de6f941922dfcd8179f82e5,b5ded444621b6180df9f3d4e07045fc1fc1e8cd9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1a8a63a5305e95519de6f941922dfcd8179f82e5,ae995b8002d3af134560a706c0e111a89e26317c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1a8a63a5305e95519de6f941922dfcd8179f82e5,dcf15eaf5641812f1cfc5e96537380132a7da89d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "1100242709d5644856131a9dd25d32672ebe7357"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "a2accc07bdcfb0c7ab2cacdca6a1fe8267816efa"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.107,6.6.148)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.48,6.12.101)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.15.194,5.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.153,6.2)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.13"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T15:15:04.692793+00:00", "updated": "2026-08-12T18:00:04.506230+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-401", "CWE-772"]}