In the Linux kernel, the following vulnerability has been resolved:
net: xdp: Disallow attaching device-bound programs in generic mode
Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes.
Fix this by adding a check to disallow attaching device-bound programs in generic mode.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-64kb-optional | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub