The Linux kernel bonding driver contains a race condition in 3ad mode because the port->aggregator field is not protected with proper RCU rules. The failure to apply __rcu qualifiers can lead to concurrent reads and writes, which may corrupt kernel memory or leave the bonding state machine in an inconsistent state. The result can be an unexpected kernel crash or loss of networking functionality, effectively causing a denial of service for the affected host.

All Linux kernels that still include the unpatched bonding code are at risk. The vulnerability exists in every kernel released before the commit that introduces the __rcu qualifier to port->aggregator; exact affected release numbers are not specified, so any system running a kernel older than that commit is considered vulnerable.

A CVSS score is not supplied, and EPSS data is unavailable, but because the flaw involves a kernel data race it can destabilize the operating system. While a direct exploitation vector has not been documented, the vulnerability could be triggered by sending specific bonding configuration messages or manipulating bonding state, potentially by a user with sufficient privileges to issue netlink commands. The flaw is not listed in the CISA KEV catalog, indicating no known public exploits as of the data provided, but the severity of a kernel crash suggests a high risk for environments that rely on 3ad bonding.