cve 2024 44990

CVE-2024-44990 is a Linux kernel vulnerability in the bonding driver's IPsec offload path. A race condition could cause a null-pointer dereference in the bond_ipsec_offload_ok function, allowing a local low-privilege user to crash the system. The fix corrects the function's return type and adds an explicit check for an active slave before dereferencing internal pointers. This patch was applied to close the security hole. The tag covers discussion of the vulnerability, its impact, and the patch that resolves it.