In the Linux kernel, the following vulnerability has been resolved:
bonding: fix xfrm real_dev null pointer dereference
We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set.
Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-core | Nov 7, 2024 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.15.166-111.163Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.225-213.878Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfo | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Dec 12, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2024 | Sep 4, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2024 | Sep 4, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-source-azure | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-nvidia-hwe-22.04 | Nov 12, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub