CVE-2025-21808

A flaw was found in the Linux kernel. A privileged local user can trigger a Denial of Service (DoS) by attaching a device-bound network program in generic eXpress Data Path (XDP) mode. Because the kernel fails to validate program compatibility with generic mode, driver functions are executed in an invalid context, leading to a system crash.

This vulnerability is rated as Moderate severity because triggering the issue requires local administrative privileges, specifically capabilities to load and attach eBPF programs (CAP_BPF or CAP_NET_ADMIN). In standard Red Hat Enterprise Linux environments, unprivileged users cannot attach eBPF programs to network interfaces. A privileged user can deliberately attach a device-bound program in generic XDP mode, causing a kernel crash and resulting in a local denial of service. Remote exploitation is not possible, and the vulnerability does not compromise data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.