In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix one more kernel-infoleak in algo dumping
During fuzz testing, the following issue was discovered:
BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30 _copy_to_iter+0x598/0x2a30 __skb_datagram_iter+0x168/0x1060 skb_copy_datagram_iter+0x5b/0x220 netlink_recvmsg+0x362/0x1700 sock_recvmsg+0x2dc/0x390 __sys_recvfrom+0x381/0x6d0 __x64_sys_recvfrom+0x130/0x200 x64_sys_call+0x32c8/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was stored to memory at: copy_to_user_state_extra+0xcc1/0x1e00 dump_one_state+0x28c/0x5f0 xfrm_state_walk+0x548/0x11e0 xfrm_dump_sa+0x1e0/0x840 netlink_dump+0x943/0x1c40 __netlink_dump_start+0x746/0xdb0 xfrm_user_rcv_msg+0x429/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was created at: __kmalloc+0x571/0xd30 attach_auth+0x106/0x3e0 xfrm_add_sa+0x2aa0/0x4230 xfrm_user_rcv_msg+0x832/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Bytes 328-379 of 732 are uninitialized Memory access of size 732 starts at ffff88800e18e000 Data copied to user address 00007ff30f48aff0
CPU: 2 PID: 18167 Comm: syz-executor.0 Not tainted 6.8.11 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
Fixes copying of xfrm algorithms where some random data of the structure fields can end up in userspace. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.
A similar issue was resolved in the commit 8222d5910dae ("xfrm: Zero padding when dumping algos and encap")
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-coreUpgrade perfUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade python3-perf | Dec 19, 2024 | Nov 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.15.173-118.169Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools | Mar 14, 2025 | Nov 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-static | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 5, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 12, 2024 | Nov 5, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 10, 2025 | Nov 5, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug | Feb 5, 2026 | Dec 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-genericUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rt | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Nov 5, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub