Threats tagged 'ghsa-pfqp-2whq-57g2'

CVE-2026-43441 is a high-severity vulnerability in the Linux kernel bonding driver that causes a NULL pointer dereference when IPv6 is disabled. The issue arises because the nd_tbl is not initialized if the kernel boots with the 'ipv6.disable=1' parameter, leading to a crash when IPv6 Neighbor Solicitation/Advertisement packets are processed by bonding ARP/NS validation. This results in a kernel oops and potential denial of service.