In the Linux kernel, the following vulnerability has been resolved:
netlink: add nla be16/32 types to minlen array
BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ...
The message in question matches this policy:
[NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255),
but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute.
Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.82-99.168Upgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub