In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access in vxlan_vnifilter_dump() [1]. If the le…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access in vxlan_vnifilter_dump() [1]. If the length of the netlink message payload is less than sizeof(struct tunnel_msg), vxlan_vnifilter_dump() accesses bytes beyond the message. This can lead to uninit-value access. Fix this by returning an error in such situations. [1] BUG: KMSAN: uninit-value in vxlan_vnifilter_dump+0x328/0x920 drivers/net…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1693d1fade71646a0731b6b213298cb443d186ea Patch
- https://git.kernel.org/stable/c/5066293b9b7046a906eff60e3949a887ae185a43 Patch
- https://git.kernel.org/stable/c/a84d511165d6ba7f331b90ae6b6ce180ec534daa Patch
- https://git.kernel.org/stable/c/cb1de9309a48cc5b771115781eec05075fd67039 Patch
- https://git.kernel.org/stable/c/f554bce488605d2f70e06eeab5e4d2448c813713 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Timeline
- nvd_ingest NVD