In the Linux kernel, the following vulnerability has been resolved:
hsr: Fix uninit-value access in hsr_get_node()
KMSAN reported the following uninit-value access issue [1]:
===================================================== BUG: KMSAN: uninit-value in hsr_get_node+0xa2e/0xa40 net/hsr/hsr_framereg.c:246 hsr_get_node+0xa2e/0xa40 net/hsr/hsr_framereg.c:246 fill_frame_info net/hsr/hsr_forward.c:577 [inline] hsr_forward_skb+0xe12/0x30e0 net/hsr/hsr_forward.c:615 hsr_dev_xmit+0x1a1/0x270 net/hsr/hsr_device.c:223 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x9c/0x6b0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x8b1d/0x9f30 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x735/0xa10 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b
Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 __alloc_skb+0x318/0x740 net/core/skbuff.c:651 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334 sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2787 packet_alloc_skb net/packet/af_packet.c:2936 [inline] packet_snd net/packet/af_packet.c:3030 [inline] packet_sendmsg+0x70e8/0x9f30 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x735/0xa10 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b
CPU: 1 PID: 5033 Comm: syz-executor334 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 =====================================================
If the packet type ID field in the Ethernet header is either ETH_P_PRP or ETH_P_HSR, but it is not followed by an HSR tag, hsr_get_skb_sequence_nr() reads an invalid value as a sequence number. This causes the above issue.
This patch fixes the issue by returning NULL if the Ethernet header is not followed by an HSR tag.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.214-202.855Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure | Jul 10, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-2117-aws-fipsUpgrade linux-image-4.15.0-1141-oracleUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-2096-azure-fipsUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1162-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1134-fipsUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-4.15.0-1172-gcpUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-4.15.0-236-genericUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-fipsUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-2080-gcp-fipsUpgrade linux-image-4.15.0-1179-awsUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-236-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1187-azureUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-virtual-lts-xenial | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub