Riskcovery

CVE-2026-23451

bonding: prevent potential infinite loop in bond_header_parse()

State
Published
Severity
7.5 High
Published
Apr 3, 2026
Updated
Oct 30, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bonding: prevent potential infinite loop in bond_header_parse()

bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points to the hierarchy top.

Add new "const struct net_device *dev" parameter to (struct header_ops)->parse() method to make sure the recursion is bounded, and that the final leaf parse method is called.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5d0fb9806ab6cf2c3cfba0e1b8c701da65e25af8 to before 9532d0d0ad1d726c06f807e8f0f1ec93cbabb452Affected
  • 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d to before 946bb6cacf0ccada7bc80f1cfa07c1ed79511c1cAffected
  • 6ac890f1d60ac3707ee8dae15a67d9a833e49956 to before 4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13Affected
  • 95597d11dc8bddb2b9a051c9232000bfbb5e43ba to before 9b49c854f14f5e2d493e562a1e28d2e57fe37371Affected
  • 950803f7254721c1c15858fbbfae3deaaeeecb11 to before b7405dcf7385445e10821777143f18c3ce20fa04Affected
  • b1f22a658a7b20bcb7d34d40cb2ef3e52847e2fbAffected
  • 6.1.191 to before 6.2Affected
LinuxLinux
  • 6.18.19 to before 6.18.20Affected
  • 6.19.9 to before 6.19.10Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.