CVE-2025-23163 net: vlan: don't propagate flags on open

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting VLAN Implementations Published Two vulnerabilities related to VLAN implementations have been published. CVE-2025-21920, published on April 1, 2025, enforces underlying device types, while CVE-2025-23163, published on May 1, 2025, addresses flag propagation on open. Affected systems may experience issues related to VLAN configurations. 2 sources 39