CVE-2026-53069

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference exists in the xdp master redirect() function. This occurs when the function attempts to call the master's ndo xdp get xmit slave() while the master device is not up. In bonding configurations using round-robin mode, the bond rr gen slave id() function dereferences the bond->rr tx counter variable, which remains NULL if the bond device was never brought up via bond open(). Because bpf master redirect enabled key is a global static key, the interception path xdp master redirect() -> bond xdp get xmit slave() -> bond xdp xmit roundrobin slave get() -> bond rr gen slave id() can be triggered for any slave system-wide once any bond device has native XDP attached, leading to a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.