In the Linux kernel, the following vulnerability has been resolved:
netkit: Assign missing bpf_net_context
During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the per-CPU variables. Otherwise we see the following crash:
BUG: kernel NULL pointer dereference, address: 0000000000000038 bpf_redirect() netkit_xmit() dev_hard_start_xmit()
Set the bpf_net_context before invoking netkit_xmit() program within the netkit driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-raspiUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub