Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23099

In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD makes sense for ARPHRD_ETHER only. syzbot reported: BUG: KASAN: global-out-of-bounds in __hw_addr_create net/core/dev_addr_lists.c:63 [inline] BUG: KASAN: global-out-of-bounds in __hw_addr_add_ex+0x25d/0x760 net/core/dev_addr_lists.c:118 Read of size 16 at addr ffffffff8bf94040 by task syz.1.3580/19497 CPU: 1 UID: 0 PID: 19497 Comm: syz.1.3580 Tainted: G
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6271148c064ad35f88ffb41ee21237b8849624cb093a50eb1d0ee89565cb36eb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semv…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"19266182b82e9100c799d8a29f5e0452f0bf7703","status":"affected","version":"872254dd6b1f80cb95ee9e2e22980888533fc293","versionType":"git"},{"lessThan":"72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4","status":"affected","version":"872254dd6b1f80cb95ee9e2e22980888533fc293","versionType":"git"},{"lessThan":"5063b2cd9b27d35ab788d707d7858ded0acc8f1d","status":"affected","version":"872254dd6b1f80…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semv…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"19266182b82e9100c799d8a29f5e0452f0bf7703","status":"affected","version":"872254dd6b1f80cb95ee9e2e22980888533fc293","versionType":"git"},{"lessThan":"72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4","status":"affected","version":"872254dd6b1f80cb95ee9e2e22980888533fc293","versionType":"git"},{"lessThan":"5063b2cd9b27d35ab788d707d7858ded0acc8f1d","status":"affected","version":"872254dd6b1f80…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/19266182b82e9100c799d8a29f5e0452f0bf7703"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/43dee6f7ef1d228821de1b61c292af3744c8d7da"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/5063b2cd9b27d35ab788d707d7858ded0acc8f1d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/80c881e53a4fa0a80fa4bef7bc0ead0e8e88940d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ef68afb1bee8d35a18896c27d7358079353d8d8a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:328c49b386343b6193c3f77f5e5a29e007136cdcef2945c62bc2efdb543149e3 · sha256:d39d1afc175c92d0… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer