Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23119

In the Linux kernel, the following vulnerability has been resolved: bonding: provide a net pointer to __skb_flow_dissect() After 3cbf4ffba5ee ("net: plumb network namespace into __skb_flow_dissect") we have to provide a net pointer to __skb_flow_dissect(), either via skb->dev, skb->sk, or a user provided pointer. In the following case, syzbot was able to cook a bare skb. WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0 net/core/flow_dissector.c:1131, CPU#1: syz.2.14
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9efd2fe1add9955759fc70941d7a846b62f86c1eb6f777a97f7dee01bc32dec3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8e53780732ee881394406f79da5263b81eb48f7e","status":"affected","version":"58deb77cc52da9360d20676e68dd215742cbe473","versionType":"git"},{"lessThan":"3be945abdd228fd00f6afcf8d137002867a4651b","status":"affected","version":"58deb77cc52da9360d20676e68dd215742cbe473","versionType":"git"},{"lessThan":"f4faaa1297ecf3255a8591fff2633df05bd5ec84","status":"affected","version":"58deb77cc52da9…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8e53780732ee881394406f79da5263b81eb48f7e","status":"affected","version":"58deb77cc52da9360d20676e68dd215742cbe473","versionType":"git"},{"lessThan":"3be945abdd228fd00f6afcf8d137002867a4651b","status":"affected","version":"58deb77cc52da9360d20676e68dd215742cbe473","versionType":"git"},{"lessThan":"f4faaa1297ecf3255a8591fff2633df05bd5ec84","status":"affected","version":"58deb77cc52da9…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0efee0b992f28bd5ee01c7a86ef6a307c42eb907"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/3be945abdd228fd00f6afcf8d137002867a4651b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/5f9b329096596b7e53e07d041d7fca4cbe1be752"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/8e53780732ee881394406f79da5263b81eb48f7e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bc3c8d2493c6f4d2038844dc8b7ee93de050f7fa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/de97735a40a144974bf3896ee4cc0270db2e47db"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/f4faaa1297ecf3255a8591fff2633df05bd5ec84"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:37e07ef7b79de0cb73a7d8272eb7e59f0ed22ea140b9d1badd88b54c9d6158eb · sha256:d52182b8043464ff… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer