CVE-2026-46153 Details
Description
In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlan_dev_set_egress_priority() currently keeps cleared egress priority mappings in the hash as tombstones. Repeated set/clear cycles with distinct skb priorities therefore accumulate mapping nodes until device teardown and leak memory. Delete mappings when vlan_prio is cleared instead of keeping tombstones. Now that the egress mapping lists are RCU protected, the node can be unlinked safely and freed after a grace period.
A vulnerability in the Linux kernel's 8021q VLAN handling has been addressed. The issue arose because the function vlan_dev_set_egress_priority() retained cleared egress priority mappings as tombstones, leading to a memory leak. This accumulation of mapping nodes occurred after repeated set/clear cycles with different skb priorities, persisting until the device was torn down. The vulnerability has been fixed by deleting mappings when the vlan_prio is cleared, rather than leaving tombstones. With the egress mapping lists now RCU protected, the nodes can be safely unlinked and freed after a grace period.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/7dddc74af369478ba7f9bc136d0fc1dc4570cb66 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a52e122c9e4d56ad9a03b32c915a199276d989c3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.12.1, < 7.0.7 2.6.12 - 2.6.12 rc2 2.6.12 rc3 2.6.12 rc4 2.6.12 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 9, 2026 | Initial Analysis | [email protected] |
| May 28, 2026 | New CVE Received | kernel.org |