CVE-2026-23451
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
bonding: prevent potential infinite loop in bond_header_parse()
In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points to the hierarchy top. Add new "const struct net_device *dev" parameter to (struct header_ops)->parse() method to make sure the recursion is bounded, and that the final leaf parse method is called.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5d0fb9806ab6cf2c3cfba0e1b8c701da65e25af8 | affected | git | 9532d0d0ad1d726c06f807e8f0f1ec93cbabb452 | Unavailable | None listed |
| 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d | affected | git | 946bb6cacf0ccada7bc80f1cfa07c1ed79511c1c | Unavailable | None listed |
| 6ac890f1d60ac3707ee8dae15a67d9a833e49956 | affected | git | 4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13 | Unavailable | None listed |
| 95597d11dc8bddb2b9a051c9232000bfbb5e43ba | affected | git | 9b49c854f14f5e2d493e562a1e28d2e57fe37371 | Unavailable | None listed |
| 950803f7254721c1c15858fbbfae3deaaeeecb11 | affected | git | b7405dcf7385445e10821777143f18c3ce20fa04 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.18.19 | affected | semver | 6.18.20 | Unavailable | None listed |
| 6.19.9 | affected | semver | 6.19.10 | Unavailable | None listed |