Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Linux kernel bridge code could cause system pause

CVE-2026-63989 · published 3 months ago
Summary

The Linux kernel's bridge networking component could pause the system when certain bridge settings are changed, because it was holding a lock while performing actions that may need to wait. This can affect Linux distributions such as Ubuntu and BellSoft that use the listed kernel packages. Updating to the latest kernel version that includes the fix resolves the issue.

What to do
  • Update bellsoft linux-lts to version 6.18.35-r1.
  • Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
  • Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
  • Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
  • Update canonical linux to version 7.0.0-28.28.
  • Update canonical linux-aws to version 7.0.0-1009.9.
  • Update canonical linux-azure to version 7.0.0-1010.10.
  • Update canonical linux-azure-fde to version 7.0.0-1009.9.
  • Update canonical linux-gcp to version 7.0.0-1008.8.
  • Update canonical linux-gke to version 7.0.0-1003.4.
  • Update canonical linux-ibm to version 7.0.0-1010.10.
  • Update canonical linux-nvidia to version 7.0.0-1016.16.
  • Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
  • Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
  • Update canonical linux-oracle to version 7.0.0-1008.8.
  • Update canonical linux-raspi to version 7.0.0-1015.15.
  • Update canonical linux-realtime to version 7.0.0-28.28.1.
  • Update canonical linux-riscv to version 7.0.0-28.28.1.
  • Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
  • Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update debian linux to version 7.0.12-1.
  • Update linux kernel to version 7.0.12.
  • Update canonical linux-azure-fde-7.0 to version 7.0.0-1013.13~24.04.1.
Affected software
Ecosystem VendorProductAffected versions
Alpaquita:stream bellsoft linux-lts >= 6.12.92-r1, < 6.18.35-r1
Fix: upgrade to 6.18.35-r1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Showing 50 of 129. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-7.0 < 7.0.0-1014.14~24.04.1
Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 All versions
Ubuntu:24.04:LTS canonical linux-gcp-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.17 All versions
Ubuntu:24.04:LTS canonical linux-hwe-7.0 < 7.0.0-28.28~24.04.1
Fix: upgrade to 7.0.0-28.28~24.04.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-7.0 < 7.0.0-1016.16~24.04.1
Fix: upgrade to 7.0.0-1016.16~24.04.1
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oracle-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 All versions
Ubuntu:24.04:LTS canonical linux-riscv-7.0 < 7.0.0-28.28.1~24.04.3
Fix: upgrade to 7.0.0-28.28.1~24.04.3
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 All versions
Ubuntu:26.04:LTS canonical linux < 7.0.0-28.28
Fix: upgrade to 7.0.0-28.28
Ubuntu:26.04:LTS canonical linux-aws < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-azure < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-azure-fde < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-gcp < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-gke < 7.0.0-1003.4
Fix: upgrade to 7.0.0-1003.4
Ubuntu:26.04:LTS canonical linux-ibm < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-nvidia < 7.0.0-1016.16
Fix: upgrade to 7.0.0-1016.16
Ubuntu:26.04:LTS canonical linux-nvidia-bos < 7.0.0-2016.16
Fix: upgrade to 7.0.0-2016.16
Ubuntu:26.04:LTS canonical linux-oem-7.0 < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-oracle < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-raspi < 7.0.0-1015.15
Fix: upgrade to 7.0.0-1015.15
Ubuntu:26.04:LTS canonical linux-realtime < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Ubuntu:26.04:LTS canonical linux-riscv < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Debian:14 debian linux < 7.0.12-1
Fix: upgrade to 7.0.12-1
Ubuntu:24.04:LTS canonical linux-azure-fde-7.0 < 7.0.0-1013.13~24.04.1
Fix: upgrade to 7.0.0-1013.13~24.04.1
– linux linux_kernel >= 6.15.1, < 6.18.35
>= 6.19, < 7.0.12
6.15
7.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.19.0, < 7.0.12
Fix: upgrade to 7.0.12
Original advisory text
bridge: Fix sleep in atomic context in netlink path
In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the introduction of the netlink configuration path for bridge ports in commit 25c71c75ac87 ("bridge: bridge port parameters over netlink"), br_setport() was always called with the bridge lock held around it. Back then this decision made sense: The bridge lock protects the STP state of the bridge and its ports and at that time the function only processed three STP related netlink attributes (cost, priority and state). Nowadays, br_setport() processes a lot more attributes and most of them do not need the bridge lock: * Bridge flags: Only require RTNL. Read locklessly by the data path. Annotations can be added in net-next. * FDB port flushing: Only requires the FDB lock. * Multicast attributes: Only require the multicast lock. * Group forward mask: Only requires RTNL. Read locklessly by the data path. Annotations can be added in net-next. * Backup port and NHID: Only require RTNL. Read locklessly by the data path. This is a problem as the bridge calls dev_set_promiscuity() when certain bridge port flags change and this function can sleep since the commit cited below, resulting in a splat such as [1]. Fix this by reducing the scope of the bridge lock and only take it when processing the three STP related attributes that require it. This is consistent with the multicast attributes where each attribute acquires the multicast lock instead of having one critical section for all relevant attributes. [1] BUG: sleeping function called from invalid context at net/core/dev_addr_lists.c:1262 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 356, name: bridge preempt_count: 201, expected: 0 RCU nest depth: 0, expected: 0 2 locks held by bridge/356: #0: ffffffff919473a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg (net/core/rtnetlink.c:80 net/core/rtnetlink.c:7002) #1: ffff888115072d58 (&br->lock){+...}-{3:3}, at: br_setlink (./include/linux/spinlock.h:348 net/bridge/br_netlink.c:1117) Preemption disabled at: 0x0 Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120) __might_resched.cold (kernel/sched/core.c:9163) netif_rx_mode_run (net/core/dev_addr_lists.c:1262) netif_rx_mode_sync (net/core/dev_addr_lists.c:1428) dev_set_promiscuity (net/core/dev_api.c:289) br_manage_promisc (net/bridge/br_if.c:135 net/bridge/br_if.c:172) br_port_flags_change (net/bridge/br_if.c:242 net/bridge/br_if.c:747) br_setport (net/bridge/br_netlink.c:1000) br_setlink (net/bridge/br_netlink.c:1118) rtnl_bridge_setlink (net/core/rtnetlink.c:5572) rtnetlink_rcv_msg (net/core/rtnetlink.c:7005) netlink_rcv_skb (net/netlink/af_netlink.c:2550) netlink_unicast (net/netlink/af_netlink.c:1318 net/netlink/af_netlink.c:1344) netlink_sendmsg (net/netlink/af_netlink.c:1894) __sock_sendmsg (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4)) ____sys_sendmsg (net/socket.c:2698) ___sys_sendmsg (net/socket.c:2752) __sys_sendmsg (net/socket.c:2784) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
References
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-667Improper Locking
Timeline
Published20 Jul 2026
Updated26 Oct 2026
First seen19 Jul 2026
Sources
BELL-CVE-2026-63989 · OSV
CVE-2026-63989 · NVD
UBUNTU-CVE-2026-63989 · OSV
DEBIAN-CVE-2026-63989 · OSV
CVE-2026-63989 · OSV
Track software like this
Free during beta