The Linux kernel's xdp_master_redirect() function dereferences the result of netdev_master_upper_dev_get_rcu() without verifying it is non-NULL. This can occur when the receiving network device has no upper-master adjacency, particularly during a bond slave release where the upper-master adjacency is dropped before clearing the slave flag. The missing NULL check leads to a kernel NULL pointer dereference at offset 0xb0 in master->flags, causing a kernel panic. The vulnerability has been fixed by adding a NULL check for the master pointer before use, treating a NULL master as equivalent to a non-up master device.

This vulnerability can cause a denial of service by triggering a kernel panic due to a NULL pointer dereference in the network packet processing path. It does not impact confidentiality or integrity but results in system unavailability until rebooted.

A fix for this vulnerability has been implemented in the Linux kernel by adding a NULL check in xdp_master_redirect(). Users should apply the official kernel updates that include this fix. Patch status is not explicitly provided here; check the vendor or Linux kernel advisories for the exact fixed versions and update accordingly.