CVE-2026-98807

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/mlx5 module where the mlx5 handle changeupper event() and mlx5 handle changeinfodata event() functions incorrectly call bonding-specific APIs when handling team device events. Because the team port structure is smaller than the bond slave structure, calling bond slave get rcu() and bond is slave inactive() on team ports leads to a slab-out-of-bounds memory access. This occurs because the functions check for Link Aggregation (LAG) masters—which include both bonding and team devices—but fail to distinguish between them before executing bonding-specific logic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.