CVE-2026-23212: bonding: annotate data-races around slave->last_rx

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 6.6.126.1-1
2. Upgrade

   Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1057.60~22.04.1
3. Upgrade

   Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1059.65~22.04.1
4. Upgrade

   Upgrade ubuntu/linux-azure-fde-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1058.65~22.04.1
5. Upgrade

   Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1060.63~22.04.1
6. Upgrade

   Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-124.124~22.04.1
7. Upgrade

   Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1055.56~22.04.1
8. Upgrade

   Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-117.117.1~22.04.1
9. Upgrade

   Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1054.57~22.04.1
10. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1054.55~22.04.1
11. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-117.117~22.04.1
12. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1051.52~22.04.1
13. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-117.117
14. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1055.58
15. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1056.62
16. Upgrade

    Upgrade ubuntu/linux-azure-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1021.21~24.04.1
17. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 6.8.0-1058.65
18. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1058.61
19. Upgrade

    Upgrade ubuntu/linux-gcp-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1021.24~24.04.1
20. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1054.60
21. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 6.8.0-1041.44
22. Upgrade

    Upgrade ubuntu/linux-hwe-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-41.41~24.04.1
23. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1055.56
24. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-117.117.1
25. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1054.57
26. Upgrade

    Upgrade ubuntu/linux-nvidia-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1031.31
27. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1054.57.1
28. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 6.8.0-1024.24
29. Upgrade

    Upgrade ubuntu/linux-oem-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1030.30
30. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1054.55
31. Upgrade

    Upgrade ubuntu/linux-oracle-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1019.19~24.04.3
32. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1056.60
33. Upgrade

    Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.

    Fixed in 6.8.0-1032.33
34. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 6.8.0-1022.26
35. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2045.46
36. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1051.52
37. Upgrade

    Upgrade ubuntu/linux-realtime-6.17 to a version that resolves this vulnerability.

    Fixed in 6.17.0-1018.20~24.04.1
38. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1055.58+fips1
39. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1059.65+fips1
40. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-116.116+fips1
41. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1058.61+fips1
42. Compensating control

    Add READ_ONCE() and WRITE_ONCE() annotations around lockless reads and writes of slave->last_rx and slave->target_last_arp_rx[...] in the bonding driver.

Event History

Frequently Asked Questions