In the Linux kernel, the following vulnerability has been resolved:
bonding: check xdp prog when set bond mode
Following operations can trigger a warning[1]:
ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip link set dev bond0 xdp obj af_xdp_kern.o sec xdp ip netns exec ns1 ip link set bond0 type bond mode broadcast ip netns del ns1
When delete the namespace, dev_xdp_uninstall() is called to remove xdp program on bond dev, and bond_xdp_set() will check the bond mode. If bond mode is changed after attaching xdp program, the warning may occur.
Some bond modes (broadcast, etc.) do not support native xdp. Set bond mode with xdp program attached is not good. Add check for xdp program when set bond mode.
[1] ------------[ cut here ]------------ WARNING: CPU: 0 PID: 11 at net/core/dev.c:9912 unregister_netdevice_many_notify+0x8d9/0x930 Modules linked in: CPU: 0 UID: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.14.0-rc4 #107 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:unregister_netdevice_many_notify+0x8d9/0x930 Code: 00 00 48 c7 c6 6f e3 a2 82 48 c7 c7 d0 b3 96 82 e8 9c 10 3e ... RSP: 0018:ffffc90000063d80 EFLAGS: 00000282 RAX: 00000000ffffffa1 RBX: ffff888004959000 RCX: 00000000ffffdfff RDX: 0000000000000000 RSI: 00000000ffffffea RDI: ffffc90000063b48 RBP: ffffc90000063e28 R08: ffffffff82d39b28 R09: 0000000000009ffb R10: 0000000000000175 R11: ffffffff82d09b40 R12: ffff8880049598e8 R13: 0000000000000001 R14: dead000000000100 R15: ffffc90000045000 FS: 0000000000000000(0000) GS:ffff888007a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000d406b60 CR3: 000000000483e000 CR4: 00000000000006f0 Call Trace: <TASK> ? __warn+0x83/0x130 ? unregister_netdevice_many_notify+0x8d9/0x930 ? report_bug+0x18e/0x1a0 ? handle_bug+0x54/0x90 ? exc_invalid_op+0x18/0x70 ? asm_exc_invalid_op+0x1a/0x20 ? unregister_netdevice_many_notify+0x8d9/0x930 ? bond_net_exit_batch_rtnl+0x5c/0x90 cleanup_net+0x237/0x3d0 process_one_work+0x163/0x390 worker_thread+0x293/0x3b0 ? __pfx_worker_thread+0x10/0x10 kthread+0xec/0x1e0 ? __pfx_kthread+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2f/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-coreUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debugUpgrade kernel-tools-libs-develUpgrade perf | Jun 8, 2026 | May 19, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-devel | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-fipsUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub