In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access in vxlan_vnifilter_dump() [1]. If the le…
中危 CVSS 5.5
摘要
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access in vxlan_vnifilter_dump() [1]. If the length of the netlink message payload is less than sizeof(struct tunnel_msg), vxlan_vnifilter_dump() accesses bytes beyond the message. This can lead to uninit-value access. Fix this by returning an error in such situations. [1] BUG: KMSAN: uninit-value in vxlan_vnifilter_dump+0x328/0x920 drivers/net…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/1693d1fade71646a0731b6b213298cb443d186ea Patch
- https://git.kernel.org/stable/c/5066293b9b7046a906eff60e3949a887ae185a43 Patch
- https://git.kernel.org/stable/c/a84d511165d6ba7f331b90ae6b6ce180ec534daa Patch
- https://git.kernel.org/stable/c/cb1de9309a48cc5b771115781eec05075fd67039 Patch
- https://git.kernel.org/stable/c/f554bce488605d2f70e06eeab5e4d2448c813713 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
时间线
- nvd_ingest NVD