CVE-2024-39296

In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" causes an oops ever since commit cc317ea3d927 ("bonding: remove redundant NULL check in debugfs function"). Here are the relevant functions being called: bonding_exit() bond_destroy_debugfs() debugfs_remove_recursive(bonding_debug_root); bonding_debug_root = NULL; <--------- SET TO NULL HERE bond_netlink_fini() rtnl_link_unregister() __rtnl_link_unregister() unregister_netdevice_many_notify() bond_uninit() bond_debug_unregister() (commit removed check for bonding_debug_root == NULL) debugfs_remove() simple_recursive_removal() down_write() -> OOPS However, reverting the bad commit does not solve the problem completely because the original code contains a race that could cause the same oops, although it was much less likely to be triggered unintentionally: CPU1 rmmod bonding bonding_exit() bond_destroy_debugfs() debugfs_remove_recursive(bonding_debug_root); CPU2 echo -bond0 > /sys/class/net/bonding_masters bond_uninit() bond_debug_unregister() if (!bonding_debug_root) CPU1 bonding_debug_root = NULL; So do NOT revert the bad commit (since the removed checks were racy anyway), and instead change the order of actions taken during module removal. The same oops can also happen if there is an error during module init, so apply the same fix there.

• CWE-362
• CWE-476

• https://git.kernel.org/stable/c/a45835a0bb6ef7d5ddbc0714dd760de979cb6ecePatch
• https://git.kernel.org/stable/c/cf48aee81103ca06d09d73d33fb72f1191069aa6Patch
• https://git.kernel.org/stable/c/f07224c16678a8af54ddc059b3d2d51885d7f35ePatch
• https://git.kernel.org/stable/c/a45835a0bb6ef7d5ddbc0714dd760de979cb6ecePatch
• https://git.kernel.org/stable/c/cf48aee81103ca06d09d73d33fb72f1191069aa6Patch
• https://git.kernel.org/stable/c/f07224c16678a8af54ddc059b3d2d51885d7f35ePatch

Published

Jun 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3929The Content Views – Post Grid & Filter, Recent Posts, Catego…6.4
• CVE-2024-39290Insufficiently protected credentials issue exists in AIPHONE…6.5
• CVE-2024-39291In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-39292In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39293In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-39294A buffer overflow vulnerability exists in the adm.cgi set_wz…7.2
• CVE-2024-39298In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39299A buffer overflow vulnerability exists in the qos.cgi qos_st…7.2
• CVE-2024-3930In versions of Akana API Platform prior to 2024.1.0 a flaw r…9.8
• CVE-2024-39300Missing authentication vulnerability exists in Telnet functi…3.7
• CVE-2024-39301In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39302BigBlueButton is an open-source virtual classroom designed t…3.7