CVE-2025-21659

netdev: prevent accessing NAPI instances from another namespace

published January 21, 2025

CVSS
—
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netdev: prevent accessing NAPI instances from another namespace

The NAPI IDs were not fully exposed to user space prior to the netlink

API, so they were never namespaced. The netlink API must ensure that

at the very least NAPI instance belongs to the same netns as the owner

of the genl sock.

napi_by_id() can become static now, but it needs to move because of

dev_get_by_napi_id().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Published
2025-01-21T12:18Z
EPSS history
Timeline
  • 21 JAN 12:18Z
    netdev: prevent accessing NAPI instances from another namespace
    cvelistv5