CVE-2024-44989
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Sep 4, 2024
CISA due date
—
Cloudanix analysis
A flaw in Linux network bonding can cause computers to crash when switching network connections while using secure IP traffic features.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Null pointer dereference in the Linux kernel bonding driver when real_dev is set to NULL during active slave failover while xfrm offload callbacks execute concurrently, causing page fault and kernel oops in functions like nsim_ipsec_offload_ok.
Why it matters to the business
Leads to system crashes or denial of service on Linux servers using network bonding with IPsec offload, potentially disrupting network services and requiring reboots; high ecosystem prevalence in kernel-dependent systems increases operational risk.
How an attack unfolds
An attacker with local access triggers repeated bonding slave interface changes (e.g., via active slave failover) while IPsec SAs are being added or packets are in transit; this races with xfrm calls to xdo_dev_offload_ok assuming real_dev is valid, resulting in dereference of a null pointer and kernel panic.
How to fix it
Update the Linux kernel to a version containing commit 21816b696c172c19d53a30d45ee005cce246ed21 or later stable releases that prevent setting real_dev to NULL; avoid null assignments in bonding xfrm handling and ensure all callbacks validate the pointer.
How to confirm the fix worked
Verify kernel version includes the fix commit; test bonding failover scenarios under IPsec load to confirm no oops or failed SA additions occur; review dmesg for absence of bonding null dereference traces.
Typical attack path
- Obtain local user privileges on a Linux system using bonding with IPsec
- Induce network interface state changes or slave failover events on the bond device
- Simultaneously initiate or maintain IPsec traffic requiring offload checks
- Trigger concurrent xfrm output paths that dereference real_dev
- Cause kernel page fault and system instability or crash
How to detect it
Search kernel logs and dmesg for oops traces involving bonding, xfrm, or netdevsim with messages about real_dev, bond_ipsec_add_sa_all failures, or page faults at addresses like 0000000000001030; correlate with active slave change events on bond interfaces.
- bond_ipsec_add_sa_all: failed to add SA
- nsim_ipsec_offload_ok
- bond0: (slave .*): making interface the new active one
- BUG: unable to handle page fault for address: 0000000000001030
What your security team should do
- Prioritize kernel upgrades on all affected Linux systems within standard patch windows given moderate CVSS and low EPSS
- Monitor for bonding-related kernel oops and failed IPsec SA messages in system logs
- Limit local unprivileged access where possible and restrict use of bonding with IPsec offload until patched
- Validate downstream package updates in distributions shipping the fixed kernel
The record
In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set. Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-abi-stablelists | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-core | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-cross-headers | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-debug | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-debug-core | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-debug-devel | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules-extra | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-devel | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-doc | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-headers | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-modules | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-modules-extra | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-rt | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-core | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-debug | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-core | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-devel | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-devel | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-modules | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-rt-modules-extra | 0 | 4.18.0-553.27.1.rt7.368.el8_10 |
| AlmaLinux:8 | kernel-tools | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs-devel | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-core | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | perf | 0 | 4.18.0-553.27.1.el8_10 |
| AlmaLinux:8 | python3-perf | 0 | 4.18.0-553.27.1.el8_10 |
| Debian:11 | linux | 0 | No fix |
| Debian:11 | linux | 0 | 5.10.226-1 |
| Debian:11 | linux-6.1 | 0 | 6.1.119-1~deb11u1 |
| Debian:12 | linux | 0 | 6.1.112-1 |
| Debian:13 | linux | 0 | 6.10.7-1 |
| Linux | Kernel | 5.9.0 | 5.10.225 |
| Mageia:9 | kernel | 0 | 6.6.50-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.50-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.20-53.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-61.mga9 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-553.27.1.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-553.27.1.rt7.368.el8_10 |
| Red Hat:rhel_eus:9.4::appstream | bpftool | 0 | 0:7.3.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | bpftool-debuginfo | 0 | 0:7.3.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-devel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-modules | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-cross-headers | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-devel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-modules | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debuginfo | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-devel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-devel-matched | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-doc | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-headers | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-modules | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-modules-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-modules-extra | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.47.1.el9_4 |
| Red Hat:rhel_eus:9.4::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-427.47.1.el9_4 |
Related vulnerabilities
- CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix… Also affects bpftool
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects bpftool
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects bpftool
- CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore… Also affects bpftool
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects bpftool
- CVE-2025-40154 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel… Also affects bpftool
- CVE-2025-40096 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix… Also affects bpftool
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects bpftool