In the Linux kernel, the following vulnerability has been resolved:
nbd: always initialize struct msghdr completely
syzbot complains that msg->msg_get_inq value can be uninitialized [1]
struct msghdr got many new fields recently, we should always make sure their values is zero by default.
[1] BUG: KMSAN: uninit-value in tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571 tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571 inet_recvmsg+0x131/0x580 net/ipv4/af_inet.c:879 sock_recvmsg_nosec net/socket.c:1044 [inline] sock_recvmsg+0x12b/0x1e0 net/socket.c:1066 __sock_xmit+0x236/0x5c0 drivers/block/nbd.c:538 nbd_read_reply drivers/block/nbd.c:732 [inline] recv_work+0x262/0x3100 drivers/block/nbd.c:863 process_one_work kernel/workqueue.c:2627 [inline] process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2700 worker_thread+0xf45/0x1490 kernel/workqueue.c:2781 kthread+0x3ed/0x540 kernel/kthread.c:388 ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
Local variable msg created at: __sock_xmit+0x4c/0x5c0 drivers/block/nbd.c:513 nbd_read_reply drivers/block/nbd.c:732 [inline] recv_work+0x262/0x3100 drivers/block/nbd.c:863
CPU: 1 PID: 7465 Comm: kworker/u5:1 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Workqueue: nbd5-recv recv_work
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade perfUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-modules | Sep 26, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 18, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-core | May 8, 2025 | Mar 18, 2024 |
| Suse | — | Upgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-azure-vdso | Jun 24, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-starfiveUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1024-oracle-64k | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub