Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98966

bonding: fix the program leak when XDP is replaced

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bonding: fix the program leak when XDP is replaced We need to release the reference on the old BPF prog, whether we are going to no-prog, or replacing the prog with another. Spotted by AI while running tests for the propagation series (leaked programs were accumulating). Selftest will come in the net-next series to avoid conflicts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to < bba6b1b086f9f4ddbfdaba7ea6279dc3abec70c7affected
  • 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to < 184b5ddf82d45d6f75cc83719a2e453392512bd2affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 7.2.11 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References