CVE-2024-47734

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()<br /> <br /> syzbot reported a WARNING in bond_xdp_get_xmit_slave. To reproduce<br /> this[1], one bond device (bond1) has xdpdrv, which increases<br /> bpf_master_redirect_enabled_key. Another bond device (bond0) which is<br /> unsupported by XDP but its slave (veth3) has xdpgeneric that returns<br /> XDP_TX. This triggers WARN_ON_ONCE() from the xdp_master_redirect().<br /> To reduce unnecessary warnings and improve log management, we need to<br /> delete the WARN_ON_ONCE() and add ratelimit to the netdev_err().<br /> <br /> [1] Steps to reproduce:<br /> # Needs tx_xdp with return XDP_TX;<br /> ip l add veth0 type veth peer veth1<br /> ip l add veth3 type veth peer veth4<br /> ip l add bond0 type bond mode 6 # BOND_MODE_ALB, unsupported by XDP<br /> ip l add bond1 type bond # BOND_MODE_ROUNDROBIN by default<br /> ip l set veth0 master bond1<br /> ip l set bond1 up<br /> # Increases bpf_master_redirect_enabled_key<br /> ip l set dev bond1 xdpdrv object tx_xdp.o section xdp_tx<br /> ip l set veth3 master bond0<br /> ip l set bond0 up<br /> ip l set veth4 up<br /> # Triggers WARN_ON_ONCE() from the xdp_master_redirect()<br /> ip l set veth3 xdpgeneric object tx_xdp.o section xdp_tx