In the Linux kernel, the following vulnerability has been resolved:
net: xdp: Disallow attaching device-bound programs in generic mode
Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes.
Fix this by adding a check to disallow attaching device-bound programs in generic mode.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-source | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1032-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-6.8 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub