CVE-2025-22105: bonding: check xdp prog when set bond mode
bonding: check xdp prog when set bond mode
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch bonding: check xdp prog when set bond mode - Configuration
When using Linux bonding with XDP attached, do not set bond mode to values that do not support native XDP (the trace notes that broadcast mode “do not support native xdp”). Use a bond mode that supports native XDP before attaching the XDP program.
Linux bonding (bonding mode) bond mode vs native XDP support = Use bond mode types that support native XDP (avoid broadcast/other modes that do not support native xdp) - Configuration
Avoid changing the bond mode after attaching the XDP program; the warning notes that “mode is changed after attaching xdp program, the warning may occur.” Ensure bond mode is set first, then attach the XDP program.
Linux netns cleanup / XDP attachment lifecycle Order of operations (bond mode change after attaching XDP) = Change bond mode before attaching XDP
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22105?
The severity of CVE-2025-22105 is classified as moderate, as it involves potential disruptions in network bonding configurations.
How do I fix CVE-2025-22105?
To fix CVE-2025-22105, ensure that you update the Linux kernel to the latest stable version where the vulnerability has been resolved.
What does CVE-2025-22105 affect?
CVE-2025-22105 affects the Linux kernel's bonding functionality, particularly when setting bond modes.
What are the symptoms of CVE-2025-22105?
Symptoms of CVE-2025-22105 may include warnings triggered during network namespace operations involving bond mode configurations.
Who is impacted by CVE-2025-22105?
Users and administrators utilizing Linux kernel bonding features in their network configurations may be impacted by CVE-2025-22105.