CVE-2026-45970

🗓️ 27 May 2026 12:18:29Reported by LinuxType

Bonding subsystem fix for a use-after-free in receive during rapid bond up and down.

Reporter	Title	Published	Views	Family All 16
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
Cvelist	CVE-2026-45970 bonding: alb: fix UAF in rlb_arp_recv during bond up/down	27 May 202612:18	–	cvelist
Debian	[SECURITY] [DLA 4606-1] linux security update	29 May 202616:36	–	debian
Debian CVE	CVE-2026-45970	27 May 202612:18	–	debiancve
Tenable Nessus	Debian dla-4606 : ata-modules-5.10.0-43-armmp-di - security update	3 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-45970	27 May 202600:00	–	nessus
EUVD	EUVD-2026-32254	27 May 202615:33	–	euvd
NVD	CVE-2026-45970	27 May 202614:17	–	nvd
OSV	BELL-CVE-2026-45970	28 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-45970	27 May 202614:17	–	osv

Vulners

CNA

Node

linux linux_kernelRange3.0–5.10.252

linux linux_kernelRange5.11.0–5.15.202

linux linux_kernelRange5.16.0–6.1.165

linux linux_kernelRange6.2.0–6.6.128

linux linux_kernelRange6.7.0–6.12.75

linux linux_kernelRange6.13.0–6.18.14

linux linux_kernelRange6.19.0–6.19.4

linux linux_kernelRange6.20.0–7.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/bonding/bond_main.c"
    ],
    "versions": [
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "fd54ddc929be1d6c3b3b7b35d6d4642a5d9e803c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "de7c097800f07f3c108185c7a38b53a530ba30ff",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "db5435b5342e3aaa4521d0f3ccfe94316b253ca1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "f94a0de7b9f32745a14a1621c63087a092823587",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "c65cdf46ce340c9c00fbbaf84599d2daff43626e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "fef13c403be3fb685cb06419e6b3623106aab5ba",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "d31065526f160ee0244a719230aa069daca2bf4d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3aba891dde3842d89ad022237b99c1ed308040b0",
        "lessThan": "e6834a4c474697df23ab9948fd3577b26bf48656",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/bonding/bond_main.c"
    ],
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.252",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.202",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.165",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.128",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.75",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.14",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.4",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/e6834a4c474697df23ab9948fd3577b26bf48656
git	www.git.kernel.org/stable/c/d31065526f160ee0244a719230aa069daca2bf4d
git	www.git.kernel.org/stable/c/db5435b5342e3aaa4521d0f3ccfe94316b253ca1
git	www.git.kernel.org/stable/c/de7c097800f07f3c108185c7a38b53a530ba30ff
git	www.git.kernel.org/stable/c/c65cdf46ce340c9c00fbbaf84599d2daff43626e
git	www.git.kernel.org/stable/c/fd54ddc929be1d6c3b3b7b35d6d4642a5d9e803c
git	www.git.kernel.org/stable/c/fef13c403be3fb685cb06419e6b3623106aab5ba
git	www.git.kernel.org/stable/c/f94a0de7b9f32745a14a1621c63087a092823587

30 May 2026 11:17Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.8

EPSS0.00013