Linux Kernel NAPI Instance Access Vulnerability in Netdev

A vulnerability in the Linux kernel's netdev component allowed for improper access to NAPI (New API) instances across different network namespaces. NAPI IDs were not fully exposed to user space before the introduction of the netlink API, resulting in a lack of proper namespacing. The netlink API must ensure that NAPI instances are accessed only within the same network namespace as the owning generic netlink socket. This vulnerability has been addressed by making the NAPI ID access static, although it requires relocation due to dependencies on the device retrieval function by NAPI ID.

Impact

Exploitation of this vulnerability could lead to cross-namespace access of NAPI instances, potentially causing unexpected behavior in network processing or resource management.