High 7.5Published Apr 3, 2026

CVE-2026-23451bonding: prevent potential infinite loop in bond_header_parse()

Updated under an hour ago (Oct 26, 2026, 10:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is setup, because skb->dev always points to the hierarchy top. Add new "const struct net_device *dev" parameter to (struct header_ops)->parse() method to make sure the recursion is bounded, and that the final leaf parse method is called.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5d0fb9806ab6cf2c3cfba0e1b8c701da65e25af8 before 9532d0d0ad1d726c06f807e8f0f1ec93cbabb452; from 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d before 946bb6cacf0ccada7bc80f1cfa07c1ed79511c1c; from 6ac890f1d60ac3707ee8dae15a67d9a833e49956 before 4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13; 95597d11dc8bddb2b9a051c9232000bfbb5e43ba builds before 9b49c854f14f5e2d493e562a1e28d2e57fe37371; from 950803f7254721c1c15858fbbfae3deaaeeecb11 before b7405dcf7385445e10821777143f18c3ce20fa04	CNA record
linux linux_kernel linux:linux_kernel	6.12.78; 6.18.19; 6.19.9; 7.0; 7.0; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/9532d0d0ad1d726c06f807e8f0f1ec93cbabb452
https://git.kernel.org/stable/c/946bb6cacf0ccada7bc80f1cfa07c1ed79511c1c	patch
https://git.kernel.org/stable/c/4172a7901cf43fe1cc63ef7a2ef33735ff7b7d13	patch
https://git.kernel.org/stable/c/9b49c854f14f5e2d493e562a1e28d2e57fe37371	patch
https://git.kernel.org/stable/c/b7405dcf7385445e10821777143f18c3ce20fa04	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.