CVE-2026-23451
published 2026-04-03CVE-2026-23451: In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.44%
35.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
bonding: prevent potential infinite loop in bond_header_parse()
bond_header_parse() can loop if a stack of two bonding devices is setup,
because skb->dev always points to the hierarchy top.
Add new "const struct net_device *dev" parameter to
(struct header_ops)->parse() method to make sure the recursion
is bounded, and that the final leaf parse method is called.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| linux | linux | >= 6.18.19 < 6.18.20 | 6.18.20 |
| linux | linux | >= 6.19.9 < 6.19.10 | 6.19.10 |
| linux | linux | >= 6ac890f1d60ac3707ee8dae15a67d9a833e49956 < 4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13 | 4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13 |
| linux | linux | >= 950803f7254721c1c15858fbbfae3deaaeeecb11 < b7405dcf7385445e10821777143f18c3ce20fa04 | b7405dcf7385445e10821777143f18c3ce20fa04 |
| linux | linux | >= 95597d11dc8bddb2b9a051c9232000bfbb5e43ba < 9b49c854f14f5e2d493e562a1e28d2e57fe37371 | 9b49c854f14f5e2d493e562a1e28d2e57fe37371 |
| linux | linux | >= 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d < 946bb6cacf0ccada7bc80f1cfa07c1ed79511c1c | 946bb6cacf0ccada7bc80f1cfa07c1ed79511c1c |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.18.19/6.19.9/7.0-rc3/7.0-rc4 bond_header_parse infinite loop
vuldb·2026-05-21·CVSS 7.5
CVE-2026-23451 [HIGH] Linux Kernel up to 6.18.19/6.19.9/7.0-rc3/7.0-rc4 bond_header_parse infinite loop
A vulnerability classified as critical has been found in Linux Kernel up to 6.18.19/6.19.9/7.0-rc3/7.0-rc4. Impacted is the function bond_header_parse. The manipulation leads to infinite loop.
This vulnerability is documented as CVE-2026-23451. The attack requires being on the local network. There is not any exploit available.
It is recommended to upgrade the affected component.
OSV
CVE-2026-23451: In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse(
osv·2026-04-06
CVE-2026-23451 CVE-2026-23451: In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse(
In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points to the hierarchy top. Add new "const struct net_device *dev" parameter to (struct header_ops)->parse() method to make sure the recursion is bounded, and that the final leaf parse method is called.
GHSA
GHSA-j6pc-6q9q-vr74: In the Linux kernel, the following vulnerability has been resolved:
bonding: prevent potential infinite loop in bond_header_parse()
bond_header_pars
ghsa_unreviewed·2026-04-03
CVE-2026-23451 GHSA-j6pc-6q9q-vr74: In the Linux kernel, the following vulnerability has been resolved:
bonding: prevent potential infinite loop in bond_header_parse()
bond_header_pars
In the Linux kernel, the following vulnerability has been resolved:
bonding: prevent potential infinite loop in bond_header_parse()
bond_header_parse() can loop if a stack of two bonding devices is setup,
because skb->dev always points to the hierarchy top.
Add new "const struct net_device *dev" parameter to
(struct header_ops)->parse() method to make sure the recursion
is bounded, and that the final leaf parse method is called.
Red Hat
kernel: bonding: prevent potential infinite loop in bond_header_parse()
vendor_redhat·2026-04-03·CVSS 5.5
CVE-2026-23451 [MEDIUM] CWE-835 kernel: bonding: prevent potential infinite loop in bond_header_parse()
kernel: bonding: prevent potential infinite loop in bond_header_parse()
In the Linux kernel, the following vulnerability has been resolved:
bonding: prevent potential infinite loop in bond_header_parse()
bond_header_parse() can loop if a stack of two bonding devices is setup,
because skb->dev always points to the hierarchy top.
Add new "const struct net_device *dev" parameter to
(struct header_ops)->parse() method to make sure the recursion
is bounded, and that the final leaf parse method is called.
A flaw was found in the Linux kernel's bonding component. When a specific network configuration involving a stack of two bonding devices is set up, the `bond_header_parse()` function can enter an infinite loop. This vulnerability can lead to a Denial of Service (DoS), making the affected syst
Debian
CVE-2026-23451: linux - In the Linux kernel, the following vulnerability has been resolved: bonding: pr...
vendor_debian·2026
CVE-2026-23451 [LOW] CVE-2026-23451: linux - In the Linux kernel, the following vulnerability has been resolved: bonding: pr...
In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points to the hierarchy top. Add new "const struct net_device *dev" parameter to (struct header_ops)->parse() method to make sure the recursion is bounded, and that the final leaf parse method is called.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
2026-04-03
Published