In the Linux kernel, the following vulnerability has been resolved:
netlink: add nla be16/32 types to minlen array
BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ...
The message in question matches this policy:
[NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255),
but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute.
Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-apm | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub