CVE-2024-44989

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description A vulnerability has been resolved in the Linux kernel, specifically in the bonding module, where a null pointer dereference could occur when setting real dev to NULL while packets are in transit and xfrm might call xdo dev offload ok() in parallel. All callbacks assume real dev is set. This issue can lead to a page fault and potentially cause the system to crash.

Recommendations To resolve this issue, update the Linux kernel to version 6.6.50 or later. If updating is not possible, consider disabling the bonding module or restricting its use until an update can be applied.