A vulnerability classified as critical has been found in Linux Kernel up to 6.18.19/6.19.9/7.0-rc3/7.0-rc4. Impacted is the function bond_header_parse. The manipulation leads to infinite loop. This vulnerability is documented as CVE-2026-23451. The attack requires being on the local network. It is recommended to upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| linux | linux kernel | 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d, 6ac890f1d60ac3707ee8dae15a67d9a833e49956, 95597d11dc8bddb2b9a051c9232000bfbb5e43ba, 950803f7254721c1c15858fbbfae3deaaeeecb11, 7.0-rc4, 6.18.19, 6.19.9, 7.0-rc3 |
Updated severity to CRITICAL, added affected versions 6.18.19, 6.19.9, 7.0-rc3, and noted that no exploit is available.
Initial creation
