bonding driver

CVE-2026-31546 is a medium-severity Linux kernel denial-of-service flaw, published by NVD on April 24, 2026 and modified on April 28, that lets a local privileged user crash affected systems through the bonding driver’s debugfs RLB hash display path. The bug is small enough to fit in a...

A small, surgical change landed in the Linux kernel this month after syzbot and KCSAN flagged a data‑race in the bonding driver: fields used to track the last‑received timestamps on bond slaves—most notably slave->last_rx and slave->target_last_arp_rx[]—were being read and written locklessly...

A race in the Linux bonding driver's IPsec offload path was closed this year after maintainers fixed a null-pointer dereference in bond_ipsec_offload_ok that could let a local, low‑privilege user crash an affected host — the patch corrects the function’s return type and adds an explicit check...