In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix one more kernel-infoleak in algo dumping
During fuzz testing, the following issue was discovered:
BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30 _copy_to_iter+0x598/0x2a30 __skb_datagram_iter+0x168/0x1060 skb_copy_datagram_iter+0x5b/0x220 netlink_recvmsg+0x362/0x1700 sock_recvmsg+0x2dc/0x390 __sys_recvfrom+0x381/0x6d0 __x64_sys_recvfrom+0x130/0x200 x64_sys_call+0x32c8/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was stored to memory at: copy_to_user_state_extra+0xcc1/0x1e00 dump_one_state+0x28c/0x5f0 xfrm_state_walk+0x548/0x11e0 xfrm_dump_sa+0x1e0/0x840 netlink_dump+0x943/0x1c40 __netlink_dump_start+0x746/0xdb0 xfrm_user_rcv_msg+0x429/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was created at: __kmalloc+0x571/0xd30 attach_auth+0x106/0x3e0 xfrm_add_sa+0x2aa0/0x4230 xfrm_user_rcv_msg+0x832/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Bytes 328-379 of 732 are uninitialized Memory access of size 732 starts at ffff88800e18e000 Data copied to user address 00007ff30f48aff0
CPU: 2 PID: 18167 Comm: syz-executor.0 Not tainted 6.8.11 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
Fixes copying of xfrm algorithms where some random data of the structure fields can end up in userspace. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.
A similar issue was resolved in the commit 8222d5910dae ("xfrm: Zero padding when dumping algos and encap")
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-docUpgrade rtlaUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matched | Dec 19, 2024 | Nov 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Mar 14, 2025 | Nov 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 5, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 12, 2024 | Nov 5, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 10, 2025 | Nov 5, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-kvm | Feb 5, 2026 | Dec 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-azureUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-5.15.0-133-lowlatency | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Nov 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub