In the Linux kernel, the following vulnerability has been resolved:
net: nexthop: Initialize all fields in dumped nexthops
struct nexthop_grp contains two reserved fields that are not initialized by nla_put_nh_group(), and carry garbage. This can be observed e.g. with strace (edited for clarity):
# ip nexthop add id 1 dev lo # ip nexthop add id 101 group 1 # strace -e recvmsg ip nexthop get id 101 ... recvmsg(... [{nla_len=12, nla_type=NHA_GROUP}, [{id=1, weight=0, resvd1=0x69, resvd2=0x67}]] ...) = 52
The fields are reserved and therefore not currently used. But as they are, they leak kernel memory, and the fact they are not just zero complicates repurposing of the fields for new ends. Initialize the full structure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade perfUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64kUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade rvUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug | Nov 21, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.165-110.161Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.10.224-212.876Upgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 26, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 9, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04d | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub