Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23212

In the Linux kernel, the following vulnerability has been resolved: bonding: annotate data-races around slave->last_rx slave->last_rx and slave->target_last_arp_rx[...] can be read and written locklessly. Add READ_ONCE() and WRITE_ONCE() annotations. syzbot reported: BUG: KCSAN: data-race in bond_rcv_validate / bond_rcv_validate write to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 1: bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335 bond_handle_frame+0xde/0x5e0 dr
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9e36dbe414930034e3ab66f7e6c02a5d07cc60096456cd1c369872aa048c5e71
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c","drivers/net/bonding/bond_options.c","include/net/bonding.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a7516cb0165926d308187e231ccd330e5e3ebff7","status":"affected","version":"f5b2b966f032f22d3a289045a5afd4afa09f09c6","versionType":"git"},{"lessThan":"8c0be3277e7aefb2f900fc37ca3fe7df362e26f5","status":"affected","version":"f5b2b966f032f22d3a289045a5afd4afa09f09c6","versionType":"git"},{"lessThan":"b956289b83887e0a306067b600…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c","drivers/net/bonding/bond_options.c","include/net/bonding.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.19"},{"lessThan":"2.6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.123","versionType":"semver"},{"lessThanOrEqual":"6.12.*","st…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c","drivers/net/bonding/bond_options.c","include/net/bonding.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a7516cb0165926d308187e231ccd330e5e3ebff7","status":"affected","version":"f5b2b966f032f22d3a289045a5afd4afa09f09c6","versionType":"git"},{"lessThan":"8c0be3277e7aefb2f900fc37ca3fe7df362e26f5","status":"affected","version":"f5b2b966f032f22d3a289045a5afd4afa09f09c6","versionType":"git"},{"lessThan":"b956289b83887e0a306067b600…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/bonding/bond_main.c","drivers/net/bonding/bond_options.c","include/net/bonding.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.19"},{"lessThan":"2.6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.123","versionType":"semver"},{"lessThanOrEqual":"6.12.*","st…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/8c0be3277e7aefb2f900fc37ca3fe7df362e26f5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a7516cb0165926d308187e231ccd330e5e3ebff7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b956289b83887e0a306067b6003c3fcd81bfdf84"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bd98324e327e41de04b13e372cc16f73150df254"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f6c3665b6dc53c3ab7d31b585446a953a74340ef"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35284d36ee7b5fa6ecb05da40c4ff745884aec0436debb2419ea9fd1c66aa0e3 · sha256:fe62010dd2216c6f… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer