Description
In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be ARPHRD_ETHER. Returning NOTIFY_BAD from lapbeth_device_event() makes sure bonding driver can not break this expectation.
Affected products
linux: linux kernel
References8
- git.kernel.org/stable/c/328bb2cff5c2ed973f595ded769e15f4b7a117be Patch
- git.kernel.org/stable/c/363a38044b8cd5b496d241651a1fb666e7c5fe3e Patch
- git.kernel.org/stable/c/63851f60781aa89258c8f0952cd13940aab0888e Patch
- git.kernel.org/stable/c/b117056768ab7deb434e7d72065e48d2083a0c2a Patch
- git.kernel.org/stable/c/b120e4432f9f56c7103133d6a11245e617695adb Patch
- git.kernel.org/stable/c/698642a01d53107ce9b3fc08bd801284af478a2b
- git.kernel.org/stable/c/a10570973619cba9dfa6d723177251b846fae587
- git.kernel.org/stable/c/ffc5ed59f6dc87c51e8775f002619310225742e8
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 2 · as of 13 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.