In the Linux kernel, the following vulnerability has been resolved:
bonding: fix xfrm real_dev null pointer dereference
We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set.
Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-core | Nov 7, 2024 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.166-111.163Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extra | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel | Dec 12, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Sep 4, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Sep 4, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-core | Nov 19, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rt | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-64k | Nov 12, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub