CVE-2024-47708: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-47708 affects the Linux kernel's netkit driver. The vulnerability was discovered when a missing bpf_net_context handling for XDP-redirect was identified in the netkit driver. This issue affects Linux kernel versions from 6.11 up to (excluding) 6.11.2 (NVD).

The vulnerability stems from the netkit driver missing the required bpf_net_context handling for XDP-redirect functionality. This is necessary because NETKIT_REDIRECT invokes skb_do_redirect() which accesses per-CPU variables. Without proper context handling, the system experiences a NULL pointer dereference at address 0x38, leading to a kernel crash in the call chain: bpf_redirect() -> netkit_xmit() -> dev_hard_start_xmit(). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability causes a kernel crash due to NULL pointer dereference, leading to a denial of service condition. The impact is limited to availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability has been patched by setting the bpf_net_context before invoking netkit_xmit() program within the netkit driver. The fix involves adding proper context handling code as demonstrated in the kernel patches (Kernel Patch, Stable Patch). Users should upgrade to Linux kernel version 6.11.2 or later to address this vulnerability.