Description
In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_del_exclude_ports() removes automatically added STAR_EXCL port groups by calling br_multicast_del_pg(). For S,G entries, that deletion calls back into br_multicast_sg_del_exclude_ports(), so a large number of STAR_EXCL ports consumes one kernel stack frame per port and can hit the stack guard page. Keep the complete port-group deletion path for cleanup, but suppress the S,G exclude-port cleanup while that helper is already walking the same entry. Normal deletion callers retain the existing behavior.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8266a0491e92d39dc9af739e8380a0daa9b8836b to < 695a5a4c69c922d9296b2d7ad5f1ce8c6858fc64affected8266a0491e92d39dc9af739e8380a0daa9b8836b to < 2fb87c6025f90191516bee3ce14b42eb3e1cfed7affected8266a0491e92d39dc9af739e8380a0daa9b8836b to < d109141ba14652146089ef78b32d5e4d5285ebadaffected8266a0491e92d39dc9af739e8380a0daa9b8836b to < 7931fb9181421953f3133b408b0f2e2b8dd68b61affected8266a0491e92d39dc9af739e8380a0daa9b8836b to < 5158353121bae4f552cb677ce8c5c3ef52f93a0daffected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.11 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/695a5a4c69c922d9296b2d7ad5f1ce8c6858fc64 ↗
- https://git.kernel.org/stable/c/2fb87c6025f90191516bee3ce14b42eb3e1cfed7 ↗
- https://git.kernel.org/stable/c/d109141ba14652146089ef78b32d5e4d5285ebad ↗
- https://git.kernel.org/stable/c/7931fb9181421953f3133b408b0f2e2b8dd68b61 ↗
- https://git.kernel.org/stable/c/5158353121bae4f552cb677ce8c5c3ef52f93a0d ↗