CVE-2026-23451

bonding: prevent potential infinite loop in bond_header_parse()

High · published April 3, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bonding: prevent potential infinite loop in bond_header_parse()

bond_header_parse() can loop if a stack of two bonding devices is setup,

because skb->dev always points to the hierarchy top.

Add new "const struct net_device *dev" parameter to

(struct header_ops)->parse() method to make sure the recursion

is bounded, and that the final leaf parse method is called.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.2th percentile
Published
2026-04-03T15:15Z
EPSS history
Timeline
  • 03 APR 15:15Z
    bonding: prevent potential infinite loop in bond_header_parse()
    cvelistv5