The Linux kernel bonding driver improperly allowed CAN network devices, specifically virtual CAN devices (vxcan), to be enslaved to bonding masters. Bonding modifies network device states assuming Ethernet-like behavior, but CAN devices rely on a distinct CAN mid-layer private data structure. This mismatch leads to null-pointer dereferences and kernel crashes during operations like socket closure. The fix explicitly blocks devices of type ARPHRD_CAN from being enslaved in bond_enslave(), preventing these crashes and potential memory leaks.

Exploiting this vulnerability can cause kernel paging request crashes (null-pointer dereferences) leading to system instability or denial of service. There is no indication of code execution or privilege escalation. The impact is limited to systems using bonding with CAN devices, which is architecturally invalid and now prevented.

A fix has been implemented in the Linux kernel that blocks CAN devices from being enslaved by the bonding driver. Users should update to a kernel version that includes this fix. Since this is a kernel-level fix, no additional mitigation is required once patched. Patch status is not explicitly stated here; check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.