CVE-2024-47734: bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
In the Linux kernel, the following vulnerability has been resolved:
bonding: Fix unnecessary warnings and logs from bondxdpgetxmitslave()
syzbot reported a WARNING in bondxdpgetxmitslave. To reproduce this[1], one bond device (bond1) has xdpdrv, which increases bpfmasterredirectenabledkey. Another bond device (bond0) which is unsupported by XDP but its slave (veth3) has xdpgeneric that returns XDPTX. This triggers WARNONONCE() from the xdpmasterredirect(). To reduce unnecessary warnings and improve log management, we need to delete the WARNONONCE() and add ratelimit to the netdeverr().
[1] Steps to reproduce: # Needs txxdp with return XDPTX; ip l add veth0 type veth peer veth1 ip l add veth3 type veth peer veth4 ip l add bond0 type bond mode 6 # BONDMODEALB, unsupported by XDP ip l add bond1 type bond # BONDMODEROUNDROBIN by default ip l set veth0 master bond1 ip l set bond1 up # Increases bpfmasterredirectenabledkey ip l set dev bond1 xdpdrv object txxdp.o section xdptx ip l set veth3 master bond0 ip l set bond0 up ip l set veth4 up # Triggers WARNONONCE() from the xdpmasterredirect() ip l set veth3 xdpgeneric object txxdp.o section xdptx
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47734?
CVE-2024-47734 has been resolved in the Linux kernel to prevent unnecessary warnings and logs.
How do I fix CVE-2024-47734?
To fix CVE-2024-47734, update to the corrected versions of the Linux kernel listed in the advisory.
What versions of the Linux kernel are affected by CVE-2024-47734?
CVE-2024-47734 affects multiple Linux kernel versions including those between 5.10 and 6.6.
Is there a patch available for CVE-2024-47734?
Yes, a patch has been made available for CVE-2024-47734 in the latest stable Linux kernel updates.
Can CVE-2024-47734 cause system instability?
While CVE-2024-47734 primarily results in unnecessary warnings, it is advisable to apply the fix to maintain optimal system performance.