CVE-2024-47708: netkit: Assign missing bpf_net_context
In the Linux kernel, the following vulnerability has been resolved:
netkit: Assign missing bpfnetcontext
During the introduction of struct bpfnetcontext handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKITREDIRECT invokes skbdoredirect() which is accessing the per-CPU variables. Otherwise we see the following crash:
BUG: kernel NULL pointer dereference, address: 0000000000000038 bpfredirect() netkitxmit() devhardstartxmit()
Set the bpfnetcontext before invoking netkitxmit() program within the netkit driver.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47708?
CVE-2024-47708 is considered to have a moderate severity level due to its potential impact on network operations.
How do I fix CVE-2024-47708?
To fix CVE-2024-47708, upgrade to the latest version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-47708?
CVE-2024-47708 affects Linux kernel versions from 6.11 to 6.11.2 inclusive.
What is the impact of not addressing CVE-2024-47708?
Not addressing CVE-2024-47708 may result in degraded network functionality and potential denial of service for applications using the netkit driver.
Is there a workaround for CVE-2024-47708?
Currently, there is no documented workaround for CVE-2024-47708, so it is recommended to apply updates promptly.