In the Linux kernel, the following vulnerability has been resolved:
net: xdp: Disallow attaching device-bound programs in generic mode
Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes.
Fix this by adding a check to disallow attaching device-bound programs in generic mode.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt_debug | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-gke-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-azure | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub