-

CVE-2026-98381

veth: manage XDP program pointers during channel resize

In the Linux kernel, the following vulnerability has been resolved:

veth: manage XDP program pointers during channel resize

veth_set_channels() tears down XDP resources for removed RX queues
without clearing rq->xdp_prog.  If the program is then detached or
replaced, those queues keep the old pointer after bpf_prog_put().
A later channel increase can re-enable NAPI and run the freed program.

  BUG: unable to handle page fault for address: ffffc90000256048
  Oops: Oops: 0000 [#1] SMP KASAN NOPTI
  RIP: veth_xdp_rcv_skb (include/linux/filter.h:779
                         include/net/xdp.h:696 drivers/net/veth.c:820)
  Call Trace:
   veth_xdp_rcv (drivers/net/veth.c:941)
   veth_poll (drivers/net/veth.c:986)
   __napi_poll (net/core/dev.c:7787)
   net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007)
   handle_softirqs (kernel/softirq.c:645)
  Kernel panic - not syncing: Fatal exception in interrupt
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 7a8e143109ff2736dc79e41dcd55af7ceab7520a
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 1a5c5b9c64ba5f39dba55da6e12561ca56eeb758
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 25bb7c36225220d30f404d7e29d2e052bc5f4b99
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 43f6b647f209591b1e3f726bb16b8dcba6b95908
Status affected
Version 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Version < 7104a370714346b667712913dc16abf14bbc97ed
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3-rc5
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.047
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/7a8e143109ff2736dc79e41dcd55af7ceab7520a
https://git.kernel.org/stable/c/1a5c5b9c64ba5f39dba55da6e12561ca56eeb758
https://git.kernel.org/stable/c/f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6
https://git.kernel.org/stable/c/3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9
https://git.kernel.org/stable/c/25bb7c36225220d30f404d7e29d2e052bc5f4b99
https://git.kernel.org/stable/c/43f6b647f209591b1e3f726bb16b8dcba6b95908
https://git.kernel.org/stable/c/7104a370714346b667712913dc16abf14bbc97ed