Skip to content
Heist/ feed
Unrated

bonding: check xdp prog when set bond mode

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip link set dev bond0 xdp obj af_xdp_kern.o sec xdp ip netns exec ns1 ip link set bond0 type bond mode broadcast ip netns del ns1 When delete the namespace, dev_xdp_uninstall() is called to remove xdp program on bond dev, and bond_xdp_set() will check the bond mode. If bond mode is changed after attaching xdp program, the warning may occur. Some bond modes (broadcast, etc.) do not support native xdp. Set bond mode with xdp program attached is not good. Add check for xdp program when set bond mode. [1] ------------[ cut here ]------------ WARNING: CPU: 0 PID: 11 at net/core/dev.c:9912 unregister_netdevice_many_notify+0x8d9/0x930 Modules linked in: CPU: 0 UID: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.14.0-rc4 #107 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:unregister_netdevice_many_notify+0x8d9/0x930 Code: 00 00 48 c7 c6 6f e3 a2 82 48 c7 c7 d0 b3 96 82 e8 9c 10 3e ... RSP: 0018:ffffc90000063d80 EFLAGS: 00000282 RAX: 00000000ffffffa1 RBX: ffff888004959000 RCX: 00000000ffffdfff RDX: 0000000000000000 RSI: 00000000ffffffea RDI: ffffc90000063b48 RBP: ffffc90000063e28 R08: ffffffff82d39b28 R09: 0000000000009ffb R10: 0000

Announced Source revision 1
Original source ↗

CVE-2025-22105

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-22105

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e",
        "lessThan": "074de2f6706ea840bbf06599cdc194086fbae092",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e",
        "lessThan": "5106da73b01668a1aa5d0f352b95d2b832b5caa7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e",
        "lessThan": "6f3af8055ee7ab69d1451f056fcd890df99c167e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e",
        "lessThan": "0dd4fac43bdea23cfe4bb2a3eabb76d752ac32fb",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e",
        "lessThan": "094ee6017ea09c11d6af187935a949df32803ce0",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/bonding/bond_main.c",
      "drivers/net/bonding/bond_options.c",
      "include/net/bonding.h"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.15"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.15",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.1.175",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.119",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.57",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.14.2",
        "versionType": "semver",
        "lessThanOrEqual": "6.14.*"
      },
      {
        "status": "unaffected",
        "version": "6.15",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/bonding/bond_main.c",
      "drivers/net/bonding/bond_options.c",
      "include/net/bonding.h"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-22105

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26982 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement