Skip to content
Heist/ feed
Unrated

inet_diag: Initialize pad field in struct inet_diag_req_v2

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw sockets uses the pad field in struct inet_diag_req_v2 for the underlying protocol. This field corresponds to the sdiag_raw_protocol field in struct inet_diag_req_raw. inet_diag_get_exact_compat() converts inet_diag_req to inet_diag_req_v2, but leaves the pad field uninitialized. So the issue occurs when raw_lookup() accesses the sdiag_raw_protocol field. Fix this by initializing the pad field in inet_diag_get_exact_compat(). Also, do the same fix in inet_diag_dump_compat() to avoid the similar issue in the future. [1] BUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline] BUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_lookup net/ipv4/raw_diag.c:49 [inline] raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564 sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netli

Announced Source revision 1
Original source ↗

CVE-2024-42106

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-42106

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "7094a5fd20ab66028f1da7f06e0f2692d70346f9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "0184bf0a349f4cf9e663abbe862ff280e8e4dfa2",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "7ef519c8efde152e0d632337f2994f6921e0b7e4",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "8366720519ea8d322a20780debdfd23d9fc0904a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "76965648fe6858db7c5f3c700fef7aa5f124ca1c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "f9b2010e8af49fac9d9562146fb81744d8a9b051",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "432490f9d455fb842d70219f22d9d2c812371676",
        "lessThan": "61cf1c739f08190a4cbf047b9fbb192a94d87e3f",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/ipv4/inet_diag.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.10"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.10",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.318",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.280",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.222",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.163",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.98",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.39",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.9",
        "versionType": "semver",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/ipv4/inet_diag.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-42106

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26670 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement