In the Linux kernel, the following vulnerability has been resolved:
netlink: add nla be16/32 types to minlen array
BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ...
The message in question matches this policy:
[NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255),
but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute.
Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade bpftool | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-obs-build | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub