Linux Kernel XDP Vulnerability: Device-Bound Programs in Generic Mode

A vulnerability in the Linux kernel's XDP (eXpress Data Path) implementation allows device-bound programs to be attached in generic mode, which is not supported. Device-bound programs rely on driver-specific metadata functions that require the driver context to operate correctly. When these programs are attached in generic mode, the metadata functions can be called in an invalid context, leading to crashes. This issue has been addressed by adding a check to prevent the attachment of device-bound programs in generic mode.

Impact

Attaching device-bound programs in generic XDP mode can cause system crashes by invoking driver-specific metadata functions in an inappropriate context.