CVE-2026-98807

The Linux kernel (net/mlx5) contains a slab-out-of-bounds memory access vulnerability. The issue stems from the mlx5_handle_changeupper_event() and mlx5_handle_changeinfodata_event() functions, which incorrectly call bonding-specific APIs—specifically bond_slave_get_rcu() and bond_is_slave_inacti...

CVE-2026-98807 net/mlx5: Fix slab-out-of-bounds when handling team device events

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...