In the Linux kernel, the following vulnerability has been resolved:
nbd: always initialize struct msghdr completely
syzbot complains that msg->msg_get_inq value can be uninitialized [1]
struct msghdr got many new fields recently, we should always make sure their values is zero by default.
[1] BUG: KMSAN: uninit-value in tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571 tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571 inet_recvmsg+0x131/0x580 net/ipv4/af_inet.c:879 sock_recvmsg_nosec net/socket.c:1044 [inline] sock_recvmsg+0x12b/0x1e0 net/socket.c:1066 __sock_xmit+0x236/0x5c0 drivers/block/nbd.c:538 nbd_read_reply drivers/block/nbd.c:732 [inline] recv_work+0x262/0x3100 drivers/block/nbd.c:863 process_one_work kernel/workqueue.c:2627 [inline] process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2700 worker_thread+0xf45/0x1490 kernel/workqueue.c:2781 kthread+0x3ed/0x540 kernel/kthread.c:388 ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
Local variable msg created at: __sock_xmit+0x4c/0x5c0 drivers/block/nbd.c:513 nbd_read_reply drivers/block/nbd.c:732 [inline] recv_work+0x262/0x3100 drivers/block/nbd.c:863
CPU: 1 PID: 7465 Comm: kworker/u5:1 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Workqueue: nbd5-recv recv_work
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debug-develUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-modules-extra | Sep 26, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.77-99.164Upgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-tools-devel | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 18, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debug-modules | May 8, 2025 | Mar 18, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-debugUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade dtb-armUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdso | Jun 24, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 18, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub