network bonding

CVE-2026-68336 fixes a Linux bonding-driver crash that can take down a host configured to disable IPv6 at boot while still running bonding’s ARP-based link monitor. The bug is not in the Windows networking stack, but it matters to Windows administrators operating Linux appliances, Hyper-V...

CVE-2026-43456 is a Linux kernel bonding-driver vulnerability published by NVD on May 8, 2026 and modified on May 11, in which a local privileged user can trigger type confusion when a non-Ethernet device such as a GRE tunnel is enslaved to a bond. The bug is not a Windows vulnerability in the...

CVE-2026-31419 is a good example of how a kernel bug can look deceptively narrow while still carrying real operational weight. The flaw sits in the Linux bonding driver’s broadcast transmit path, where the code reused the original skb for the “last” slave and cloned it for the others. Under...