In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw s…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw sockets uses the pad field in struct inet_diag_req_v2 for the underlying protocol. This field corresponds to the sdiag_raw_protocol field in struct inet_diag_req_raw. inet_diag_get_exact_compat() converts inet_diag_req to inet_diag_req_v2, but leaves the pad field uninitialized. So the issue occurs …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2 Patch
- https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f Patch
- https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9 Patch
- https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c Patch
- https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4 Patch
- https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a Patch
- https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb Patch
- https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051 Patch
- https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2 Patch
- https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f Patch
- https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9 Patch
- https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c Patch
- https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4 Patch
- https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a Patch
- https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb Patch
- https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051 Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Timeline
- nvd_ingest NVD