In the Linux kernel, the following vulnerability has been resolved:
netkit: Assign missing bpf_net_context
During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the per-CPU variables. Otherwise we see the following crash:
BUG: kernel NULL pointer dereference, address: 0000000000000038 bpf_redirect() netkit_xmit() dev_hard_start_xmit()
Set the bpf_net_context before invoking netkit_xmit() program within the netkit driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-aws | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub