Linux Kernel Vulnerability in Device-Bound Programs for Generic Mode

CVE-2025-21808

Summary

A vulnerability in the Linux kernel allows device-bound programs to be improperly attached in generic XDP mode, which can lead to system crashes. These programs are intended to utilize RX metadata kfuncs specific to drivers, but without appropriate checks in place, they can be invoked in a generic context, resulting in invalid behavior and potential instability. This issue has been addressed by introducing restrictions that prevent such attachments in generic mode, thereby enhancing system reliability.

References