CVE-2026-80625

A flaw was found in the Linux kernel's RDMA/hns component. During concurrent driver removal and reset operations, bonding resources are incorrectly released and then re-allocated, leading to a memory leak. This memory leak can potentially cause a kernel panic, resulting in a Denial of Service DoS...

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: A silent pairing issue in bluetooth-based contact tracing apps Authors: Jim Mussared George Robotics, Alwen Tiu The Australian National University A vulnerability has been identified in the implementation of the Android version of Australia's COVIDSafe v1.0.17 and earlie...

UBUNTU-CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

EUVD-2026-67501

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80625

CVE-2026-80625 affects the Linux kernel in the RDMA/hns driver. In a corner case of concurrent driver removal and driver reset , a bonding resource is first released in hns_roce_hw_v2_exit() and then re-allocated in hns_roce_register_device(), but the release timing has already passed. This cause...

CVE-2026-80625 RDMA/hns: Fix memory leak of bonding resources

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098963 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: limit BONDMODE8023AD to Ethernet devices BONDMODE8023AD makes sense for ARPHRDETHER only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098960 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel-based network device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bonddebug_rlb_hash_show() function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel-based network device driver allows a hacker to cause a system failure.

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-74726

A flaw was found in the Linux kernel's bonding module, specifically within the Active-Backup Load Balancing ALB monitor. This vulnerability arises from a race condition where the system makes decisions based on outdated network interface status. This can lead to a system crash, causing a Denial o...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bonding: Unnecessary warnings and logs from bondxdpgetxmitslave have been fixed. syzbot reported a warning in bondxdpgetxmitslave. To reproduce this issue1, one bonding device bond1 should have xdpdrv, which increases...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: Networks: Fixed a stack overflow issue when LRO is disabled for virtual interfaces. When the features of a virtual interface are updated, the updated features are synchronized with its underlying interfaces. This synchronization...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bonding: Fixed type confusion in bondsetupbyslave Kernel bug at net/core/skbuff.c:2306! Oops: Invalid opcode: 0000 1 SMP KASAN NOPTI RIP: 0010:pskbexpandhead+0xa08/0xfe0, net/core/skbuff.c:2306 RSP: 0018:ffffc90004aff760, EFLAGS:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: When a non-Ethernet device is used as a slave in a bonding configuration, the IFFSLAVE flag of the bonding device must be restored if the slave device fails. A warning was reported by syzbot1. In this case, the bonding device...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: bonding: Fix for use-after-free after 802.3ad slave unbind Commit 0622cab0341c “bonding: fix 802.3ad aggregator reselection” resolves a issue where, when there are several aggregation groups within the same bond,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bonding: The device was stopped during the bondsetupbyslave function. The commit 9eed321cde22 “net: lapbether: only supports Ethernet devices” allowed syzbot to remain away from net/lapb until today. In the following issue 1, a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bonding: Annotate the data races around slave-lastrx. slave-lastrx and slave-targetlastarprx... can be read and written without locking. Add READONCE and WRITEONCE annotations. syzbot reported: BUG: KCSAN: Data race in...