CVE-2025-21808
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net: xdp: Disallow attaching device-bound programs in generic mode
In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes. Fix this by adding a check to disallow attaching device-bound programs in generic mode.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2b3486bc2d237ec345b3942b7be5deabf8c8fed1 | affected | git | b1bc4a35a04cbeb85b6ef5911ec015baa424989f | Unavailable | None listed |
| 2b3486bc2d237ec345b3942b7be5deabf8c8fed1 | affected | git | 557707906dd3e34b8a8c265f664d19f95799937e | Unavailable | None listed |
| 2b3486bc2d237ec345b3942b7be5deabf8c8fed1 | affected | git | 5a9eae683d6c36e8a7aa31e5eb8b369e41aa66e1 | Unavailable | None listed |
| 2b3486bc2d237ec345b3942b7be5deabf8c8fed1 | affected | git | 3595599fa8360bb3c7afa7ee50c810b4a64106ea | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.3 | Unavailable | None listed |
| 6.6.76 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.13 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13.2 | unaffected | semver | Unavailable | 6.13.* | None listed |
| 6.14 | unaffected | original_commit_for_fix | Unavailable | * | None listed |