CVE-2026-46153: 8021q: delete cleared egress QoS mappings
8021q: delete cleared egress QoS mappings
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Linux systems that repeatedly set and clear VLAN egress QoS mappings using distinct skb priorities are exposed. The impact is memory accumulation until the affected VLAN device is torn down.
What access does an attacker need to exploit it?
The CVSS vector indicates local access with low privileges and no user interaction is required. Exploitation depends on being able to trigger repeated egress priority mapping set/clear cycles.
Is there a workaround if patching is delayed?
Avoid repeated set/clear cycles for VLAN egress QoS mappings with distinct skb priorities. Tearing down the affected VLAN device releases the accumulated mapping nodes.
How can I tell whether a system may be affected?
Review whether VLAN egress QoS mappings are being repeatedly created and cleared with varying skb priorities. Systems exhibiting memory growth during such cycles may be affected.