Global Out-of-Bounds Vulnerability in Linux Kernel Bonding for Ethernet Devices
CVE-2026-23099

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 February 2026

What is CVE-2026-23099?

A vulnerability within the Linux kernel's bonding driver has been identified, specifically affecting the BOND_MODE_8023AD configuration for Ethernet devices. This issue can lead to global out-of-bounds access due to misconfiguration and can be exploited by attackers, resulting in unexpected behavior or potential denial of service. The functionality of BOND_MODE_8023AD is intended solely for ARPHRD_ETHER interfaces, and the vulnerability has been addressed in recent kernel updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch