In the Linux kernel, the following vulnerability has been resolved:
bonding: fix xfrm real_dev null pointer dereference
We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set.
Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-modules-extra | Nov 7, 2024 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.166-111.163Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.225-213.878Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2024 | Sep 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | Sep 4, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-amd | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.15.0-1038-xilinx-zynqmp | Nov 12, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub