Linux Kernel LAPB Ethernet Device Type Change Handling Vulnerability

A vulnerability in the Linux kernel's LAPB Ethernet handling has been addressed. The issue arose because the 'lapbeth_data_transmit' function required the underlying device type to be Ethernet, but this expectation could be violated. The bonding driver was allowed to enslave non-Ethernet devices, potentially leading to issues. The vulnerability has been fixed by ensuring that the bonding driver cannot disrupt this requirement.

Impact

The vulnerability could have allowed the bonding driver to improperly manage non-Ethernet devices, potentially leading to network communication issues.

Reproduction

The vulnerability could be reproduced by using the bonding driver to enslave a non-Ethernet device, which would violate the expectation of the 'lapbeth_data_transmit' function regarding the device type.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed.