CVE-2026-74726

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the bond alb monitor() function. The function reads the primary is promisc variable under RCU (Read-Copy-Update), then releases RCU and acquires RTNL (Routing Netlink) via rtnl trylock() before modifying the promiscuity of the active slave. During this transition, the active slave can change, which may clear primary is promisc and drop promiscuity. If the monitor proceeds with the stale decision, it can lead to a null-pointer dereference if the slave was removed without failover, or an underflow of the promiscuity counter for a new slave if a failover occurred, pinning it in IFF PROMISC (Interface Promiscuous) mode. This can result in a general protection fault and a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.