CVE-2024-47708
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-47708
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-47708.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-47708
- Downstream
- Related
- Published
- 2024-10-21T11:53:42.086Z
- Modified
- 2025-11-28T02:34:58.189287Z
- Summary
- netkit: Assign missing bpf_net_context
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netkit: Assign missing bpfnetcontext
During the introduction of struct bpfnetcontext handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKITREDIRECT invokes skbdo_redirect() which is accessing the per-CPU variables. Otherwise we see the following crash:
BUG: kernel NULL pointer dereference, address: 0000000000000038 bpf_redirect() netkit_xmit() dev_hard_start_xmit()Set the bpfnetcontext before invoking netkit_xmit() program within the netkit driver.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47708.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/157f29152b61ca41809dd7ead29f5733adeced19
- https://git.kernel.org/stable/c/182c6fed8c7f62cddce0126ec1fc0da2b700fb11
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47708.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-47708