Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected da58f90f11f597520f226caff1d3cfc115abedc9 before 175556c049eaec14efde8c6475e763b7579b9de7; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 6e2cfd0904976e701d7a76b86b694e72af230ab0; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 818f7673ed7f4a29d4b9cee8184c47d6e57162b4; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 978ca6ff789f1f19c03288ac20cc1f4774e88490; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 750d0091bebf44975421268d37484ef87060d263; affected da58f90f11f597520f226caff1d3cfc115abedc9 before bc6002865e8c4fcf9e94975f7cf023448d8764e2; affected da58f90f11f597520f226caff1d3cfc115abedc9 before 35eaa6d8d6c2ee65e96f507add856e0eacf24591 |
| Linux / Linux | affected 5.4; unaffected 0 before 5.4; unaffected 5.10.258 through 5.10.*; unaffected 5.15.209 through 5.15.*; unaffected 6.1.175 through 6.1.*; unaffected 6.6.141 through 6.6.*; unaffected 6.12.91 through 6.12.*; unaffected 6.18.33 through 6.18.*; unaffected 7.0.10 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/175556c049eaec14efde8c6475e763b7579b9de7
- https://git.kernel.org/stable/c/6e2cfd0904976e701d7a76b86b694e72af230ab0
- https://git.kernel.org/stable/c/1b7b6ae0e93b8d512e208b1378d74af052e4f4e7
- https://git.kernel.org/stable/c/818f7673ed7f4a29d4b9cee8184c47d6e57162b4
- https://git.kernel.org/stable/c/978ca6ff789f1f19c03288ac20cc1f4774e88490
- https://git.kernel.org/stable/c/750d0091bebf44975421268d37484ef87060d263
- https://git.kernel.org/stable/c/bc6002865e8c4fcf9e94975f7cf023448d8764e2
- https://git.kernel.org/stable/c/35eaa6d8d6c2ee65e96f507add856e0eacf24591