← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-23451

Last refreshed2026-10-30

Status: UPDATED  |  Advisory ID: CVE-2026-23451

Key Details

CVECVE-2026-23451
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-30
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

bonding: prevent potential infinite loop in bond_header_parse()

bond_header_parse() can loop if a stack of two bonding devices is setup,

because skb->dev always points to the hierarchy top.

Add new "const struct net_device *dev" parameter to

(struct header_ops)->parse() method to make sure the recursion

is bounded, and that the final leaf parse method is called. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23451
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23451

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.