EUVD-2026-108927

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

CVE-2026-98953

The Linux kernel contains a reference leak vulnerability within the devlink component. The issue occurs in devlink_rel_nested_in_notify_work_schedule() and the reschedule path of devlink_rel_nested_in_notify_work(), where the system takes a reference on the devlink_rel but fails to drop it if the...

PT-2021-25410

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...

PT-2021-25323

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...

PT-2021-29352

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...

PT-2021-29303

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...

PT-2021-29477

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...

PT-2021-25358

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...

PT-2021-25340

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not...

PT-2021-25483

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...

PT-2021-29404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...

UVI-2021-1000828 bonding: init notify_work earlier to avoid uninitialized use

bonding: init notifywork earlier to avoid uninitialized use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.273 by commit...

PT-2021-29293

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.273 Description The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...

PT-2021-25299

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.273 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...