In the Linux kernel, the following vulnerability has been resolved:
netkit: Assign missing bpf_net_context
During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the per-CPU variables. Otherwise we see the following crash:
BUG: kernel NULL pointer dereference, address: 0000000000000038 bpf_redirect() netkit_xmit() dev_hard_start_xmit()
Set the bpf_net_context before invoking netkit_xmit() program within the netkit driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub