In the Linux kernel, the following vulnerability has been resolved:
net: xdp: Disallow attaching device-bound programs in generic mode
Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes.
Fix this by adding a check to disallow attaching device-bound programs in generic mode.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade dtb-armUpgrade dlm-kmp-rt | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2026-raspi-realtime | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub