{"id":"CVE-2026-97419","summary":"hsr: broadcast netlink notifications in the device's net namespace","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nhsr: broadcast netlink notifications in the device's net namespace\n\nThe HSR generic netlink family sets .netnsok = true. HSR devices can\nlive in network namespaces other than init_net.\n\nTwo async notifiers broadcast events with genlmsg_multicast(). They\nare hsr_nl_ringerror() and hsr_nl_nodedown(). That helper delivers\nonly on the default genl socket in init_net. So the events always land\nin init_net. The network namespace of the device does not matter.\n\nThis has two effects. A listener in the device's own namespace never\nsees its own ring error and node down events. A privileged listener in\ninit_net receives events from HSR devices in other namespaces. The\npayload carries the peer node MAC (HSR_A_NODE_ADDR) and the slave port\nifindex (HSR_A_IFINDEX).\n\nSwitch both callers to genlmsg_multicast_netns(). Other families with\n.netnsok = true already do this. Examples are gtp, ovpn, team,\nbatman-adv, netdev-genl, ethtool and handshake.\n\nhsr_nl_ringerror() already has the slave port. It uses\ndev_net(port-\u003edev). hsr_nl_nodedown() takes the namespace from the\nmaster port via hsr_port_get_hsr().","modified":"2026-10-22T10:34:33.527687307Z","published":"2026-09-24T16:03:28.957Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97419.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/016b8eaca53bfd57e84ea28b5c9174c89d7679e1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/24b3f1a9982c176d05a523a4bb9314dca0db4488"},{"type":"WEB","url":"https://git.kernel.org/stable/c/25b69f281cebe051a8e4ab19950a939c27ead1bc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/798ccb12810a58a37264685b28ddf990ef49559c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9bf45feee630be868ab54e3d0f3d430c07471f0e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9f13023607f1e95bd098cc49052b0c8955d334f9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a762fabd7ef9a6cc07258684138f9c3f078d0326"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97419.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97419"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f421436a591d34fa5279b54a96ac07d70250cc8d"},{"fixed":"9f13023607f1e95bd098cc49052b0c8955d334f9"},{"fixed":"798ccb12810a58a37264685b28ddf990ef49559c"},{"fixed":"9bf45feee630be868ab54e3d0f3d430c07471f0e"},{"fixed":"016b8eaca53bfd57e84ea28b5c9174c89d7679e1"},{"fixed":"25b69f281cebe051a8e4ab19950a939c27ead1bc"},{"fixed":"24b3f1a9982c176d05a523a4bb9314dca0db4488"},{"fixed":"a762fabd7ef9a6cc07258684138f9c3f078d0326"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97419.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.13.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97419.json"}}],"schema_version":"1.9.2"}