CVE-2024-47708

netkit: Assign missing bpf_net_context

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netkit: Assign missing bpf_net_context

During the introduction of struct bpf_net_context handling for

XDP-redirect, the netkit driver has been missed, which also requires it

because NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the

per-CPU variables. Otherwise we see the following crash:

BUG: kernel NULL pointer dereference, address: 0000000000000038

bpf_redirect()

netkit_xmit()

dev_hard_start_xmit()

Set the bpf_net_context before invoking netkit_xmit() program within the

netkit driver.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2024-10-21T11:53Z
EPSS history
Timeline
  • 21 OCT 11:53Z
    netkit: Assign missing bpf_net_context
    cvelistv5