In the Linux kernel, the following vulnerability has been resolved:
bonding: fix xfrm real_dev null pointer dereference
We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set.
Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt | Nov 7, 2024 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.166-111.163Upgrade perfUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-toolsUpgrade kernel-devel | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Sep 4, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2024 | Sep 4, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-core | Nov 19, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade kernel-docs-html | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-24.04 | Nov 12, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub