CVE-2026-23451
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/04/2026
Last modified:
03/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bonding: prevent potential infinite loop in bond_header_parse()<br />
<br />
bond_header_parse() can loop if a stack of two bonding devices is setup,<br />
because skb->dev always points to the hierarchy top.<br />
<br />
Add new "const struct net_device *dev" parameter to<br />
(struct header_ops)->parse() method to make sure the recursion<br />
is bounded, and that the final leaf parse method is called.



