You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
bonding driver
About this tag
The Linux bonding driver provides link aggregation and failover by combining multiple physical network interfaces into a single logical device. Recent discussions on WindowsForum.com cover kernel security patches and bug fixes for this driver, including a null-pointer dereference in the IPsec offload path (CVE-2024-44990), a data race in slave timestamp fields fixed with READ_ONCE/WRITE_ONCE, and a denial-of-service flaw in the debugfs RLB hash display (CVE-2026-31546). These threads focus on upstream Linux kernel changes that improve stability and security for systems using bonding, particularly in enterprise and data center environments where link redundancy is critical.
CVE-2026-31546 is a medium-severity Linux kernel denial-of-service flaw, published by NVD on April 24, 2026 and modified on April 28, that lets a local privileged user crash affected systems through the bonding driver’s debugfs RLB hash display path. The bug is small enough to fit in a...
A small, surgical change landed in the Linux kernel this month after syzbot and KCSAN flagged a data‑race in the bonding driver: fields used to track the last‑received timestamps on bond slaves—most notably slave->last_rx and slave->target_last_arp_rx[]—were being read and written locklessly...
A race in the Linux bonding driver's IPsec offload path was closed this year after maintainers fixed a null-pointer dereference in bond_ipsec_offload_ok that could let a local, low‑privilege user crash an affected host — the patch corrects the function’s return type and adds an explicit check...