CVE-2026-63990

A flaw was found in the Linux kernel's bonding driver. This vulnerability allows a local user to cause a kernel crash, leading to a Denial of Service DoS, by attempting to enslave a virtual Controller Area Network CAN device to a bonding master. The bonding driver, designed for Ethernet-like...

Linux Distros Unpatched Vulnerability : CVE-2026-63990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtu...

EUVD-2026-45563

In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtual CAN device vxcan is being enslaved to a bonding master. During the...

CVE-2026-63990

In the Linux kernel , a vulnerability exists where the bonding driver fails to block CAN devices (type ARPHRD_CAN) from being enslaved. Because CAN devices lack standard Ethernet structures like MAC addresses, the driver's attempt to apply an Ethernet-like aggregation model results in a null-poin...

SUSE CVE-2026-22997

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...