In the Linux kernel, the following vulnerability has been resolved:
bonding: fix xfrm real_dev null pointer dereference
We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set.
Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extra | Nov 7, 2024 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.15.166-111.163Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfo | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2024 | Sep 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | Sep 4, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf | Nov 19, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade dtb-amdUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dtb-nvidia | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-azureUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-24.04 | Nov 12, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub