SECUFOCUSNOW
Home›CVE index›CVE-2026-43456
Review reviewHigh

CVE-2026-43456

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bond_setup_by_slave() kernel BUG at net/core/skbuff.c:2306! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI RIP: 0010:pskb_expand_head+0xa08/0xfe0 net/core/skbuff.c:2306 RSP: 0018:ffffc90004aff760 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88807e3c8780 RCX: ffffffff89593e0e RDX: ffff88807b7c4900 RSI: ffffffff89594747 RDI: ffff88807b7c4900 RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 R10: 00000000961a63e0 R11: 0000000000000000 R12: ffff88807e3c8780 R13: 00000000961a656...

CVSS
7.8
EPSS
0.16%
5.67% percentile
CISA KEV
Not listed
Published
2026.05.09
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.16%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bond_setup_by_slave() kernel BUG at net/core/skbuff.c:2306! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI RIP: 0010:pskb_expand_head+0xa08/0xfe0 net/core/skbuff.c:2306 RSP: 0018:ffffc90004aff760 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88807e3c8780 RCX: ffffffff89593e0e RDX: ffff88807b7c4900 RSI: ffffffff89594747 RDI: ffff88807b7c4900 RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 R10: 00000000961a63e0 R11: 0000000000000000 R12: ffff88807e3c8780 R13: 00000000961a656...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 1284cd3a2b740d0118458d2ea470a1e5bc19b187 < 5d0fb9806ab6cf2c3cfba0e1b8c701da65e25af8, >= 1284cd3a2b740d0118458d2ea470a1e5bc19b187 < 9baf26a91565b7bb2b1d9f99aaf884a2b28c2f6d, >= 1284cd3a2b740d0118458d2ea470a1e5bc19b187 < 6ac890f1d60ac3707ee8dae15a67d9a833e49956, >= 1284cd3a2b740d0118458d2ea470a1e5bc19b187 < 95597d11dc8bddb2b9a051c9232000bfbb5e43ba, >= 1284cd3a2b740d0118458d2ea470a1e5bc19b187 < 950803f7254721c1c15858fbbfae3deaaeeecb11, >= 2.6.24, >= 2.6.24 < 6.12.78, >= 6.13 < 6.18.19, >= 6.19 < 6.19.9, 7.0
Fixed versions
6.12.78, 6.18.19, 6.19.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-908