CVE-2024-44989 bonding: fix xfrm real_dev null pointer dereference

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Vulnerabilities in Bonding Driver Microsoft has published information on two vulnerabilities affecting the bonding driver. CVE-2024-44989, published on September 4, 2024, addresses a null pointer dereference issue, while CVE-2024-47734, published on October 21, 2024, fixes unnecessary warnings and logs from the bonding driver. Users of affected systems should apply the relevant patches to mitigate these issues. 2 sources 39