Type Confusion Vulnerability in Linux Kernel Affecting Bonding Drivers

CVE-2026-43456

What is CVE-2026-43456?

A type confusion vulnerability affects the bonding feature in the Linux kernel. When a non-Ethernet device, such as a GRE tunnel, is enslaved to a bond, the bonding logic improperly inherits the header operations from the slave device. This can lead to incorrect device-specific data access, causing the system to read garbage values, resulting in crashes. The issue arises because the bond device does not account for the specific data layout expected by the header operations. A fix was introduced to use dedicated wrapper functions for bond devices, ensuring correct handling of network device private data, thus preventing potential system instability.

References