In the Linux kernel’s dpaa2_switch driver, an error in the bridge leave path causes the driver to allocate a new forwarding database (FDB) without properly marking the previous one as unused. When multiple bridges share the same DPaaS (Data Path Acceleration Switch) instance, this oversight can lead to several ports ending up with the same FDB, resulting in traffic from one bridge being forwarded to another. The flaw is classified as Resource). No evidence of denial‑of‑service or code execution is disclosed.

The issue affects any Linux kernel that includes the dpaa2_switch module and compiles it against versions that contain the buggy FDB logic. All stock Linux distributions shipping the dpaa2_switch driver are potentially impacted. Systems that disable or do not load the dpaa2_switch module are unaffected.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of <1% shows a low empirical likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, an adversary would need privileged network‑configuration rights or a compromised host to force a port to leave a bridge and trigger the flawed FDB reuse. Successful exploitation could cause isolated network segments to leak traffic to each other, enabling data confidentiality breaches. Overall risk is moderate but remediation is advised.