In the Linux kernel, the following vulnerability has been resolved:
net: bridge: xmit: make sure we have at least eth header len bytes
syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To fix it check if we can actually pull that amount instead of assuming.
Tested with dropwatch: drop at: br_dev_xmit+0xb93/0x12d0 [bridge] (0xffffffffc06739b3) origin: software timestamp: Mon May 13 11:31:53 2024 778214037 nsec protocol: 0x88a8 length: 2 original length: 2 drop reason: PKT_TOO_SMALL
[1] BUG: KMSAN: uninit-value in br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547 __dev_queue_xmit+0x34db/0x5350 net/core/dev.c:4341 dev_queue_xmit include/linux/netdevice.h:3091 [inline] __bpf_tx_skb net/core/filter.c:2136 [inline] __bpf_redirect_common net/core/filter.c:2180 [inline] __bpf_redirect+0x14a6/0x1620 net/core/filter.c:2187 ____bpf_clone_redirect net/core/filter.c:2460 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2432 ___bpf_prog_run+0x13fe/0xe0f0 kernel/bpf/core.c:1997 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2238 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] bpf_test_run+0x499/0xc30 net/bpf/test_run.c:425 bpf_prog_test_run_skb+0x14ea/0x1f20 net/bpf/test_run.c:1058 bpf_prog_test_run+0x6b7/0xad0 kernel/bpf/syscall.c:4269 __sys_bpf+0x6aa/0xd90 kernel/bpf/syscall.c:5678 __do_sys_bpf kernel/bpf/syscall.c:5767 [inline] __se_sys_bpf kernel/bpf/syscall.c:5765 [inline] __x64_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5765 x64_sys_call+0x96b/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debug-devel | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.230-223.885Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools | Dec 20, 2024 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-common | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade python-perf | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug | Aug 22, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-xenUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-xen-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-trace-baseUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-ec2-develUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade kernel-traceUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-ec2-baseUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-ec2Upgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-default-livepatch | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.15Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-202-genericUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1078-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub