-

CVE-2026-98089

bonding: alb: fix uninitialized transport header access in alb_determine_nd()

In the Linux kernel, the following vulnerability has been resolved:

bonding: alb: fix uninitialized transport header access in alb_determine_nd()

alb_determine_nd() uses icmp6_hdr(skb) to inspect ICMPv6 headers.
However, in xmit paths (e.g. packets sent via AF_PACKET / raw sockets
or forwarded packets), skb->transport_header is not guaranteed to be
initialized. While pskb_network_may_pull() ensures the packet data is
linear starting from the network header, it does not set or adjust the
transport header offset.

Dereferencing icmp6_hdr(skb) can therefore access out-of-bounds memory.

Fetch the icmp6hdr directly after ipv6hdr following pskb_network_may_pull(),
and reload ipv6hdr in case pskb_may_pull() reallocated skb->head.
Also remove the unused bond argument from alb_determine_nd().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < 862c8eb6947689c44fe11353755576a3672563a5
Status affected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < 7adb1bf25b0c5cedfb49b6e82844394d4f3c0d99
Status affected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < e39cf90bd856443542b97933289749fca07476bf
Status affected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < 27314f96d29b54e815e7a9b84c3273f1895e68e2
Status affected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < 3b178894931a268c09126a5b53630f343e10e296
Status affected
Version 0da8aa00bfcfeb3f4e6537dd8e2001e0727ba549
Version < 70f3995830d3f1e79faa14eb0605914f778feca9
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version 0
Version < 5.18
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e39cf90bd856443542b97933289749fca07476bf
https://git.kernel.org/stable/c/27314f96d29b54e815e7a9b84c3273f1895e68e2
https://git.kernel.org/stable/c/3b178894931a268c09126a5b53630f343e10e296
https://git.kernel.org/stable/c/70f3995830d3f1e79faa14eb0605914f778feca9
https://git.kernel.org/stable/c/7adb1bf25b0c5cedfb49b6e82844394d4f3c0d99
https://git.kernel.org/stable/c/862c8eb6947689c44fe11353755576a3672563a5