In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() test…
Medium CVSS 4.7
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL while __ip_make_skb() is running, the function will access icmphdr in the skb even if it is not included. This causes the issue reported by KMSAN. Check FL…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/20d3eb00ab81462d554ac6d09691b8d9aa5a5741
- https://git.kernel.org/stable/c/55bf541e018b76b3750cb6c6ea18c46e1ac5562e
- https://git.kernel.org/stable/c/5db08343ddb1b239320612036c398e4e1bb52818 Patch
- https://git.kernel.org/stable/c/88c66f1879f322f11de34d37b2d3d87497afdcb6
- https://git.kernel.org/stable/c/f5c603ad4e6fcf42f84053e882ebe20184bb309e Patch
- https://git.kernel.org/stable/c/fc1092f51567277509563800a3c56732070b6aa4 Patch
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Timeline
- nvd_ingest NVD