CVE-2024-47708 - Netkit BPF Null Pointer Dereference Vulnerability

CVE ID : CVE-2024-47708
Published : Oct. 21, 2024, 12:15 p.m. | 24 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpf_net_context During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKIT_REDIRECT invokes skb_do_redirect() which is accessing the per-CPU variables. Otherwise we see the following crash: BUG: kernel NULL pointer dereference, address: 0000000000000038 bpf_redirect() netkit_xmit() dev_hard_start_xmit() Set the bpf_net_context before invoking netkit_xmit() program within the netkit driver.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...