In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix one more kernel-infoleak in algo dumping
During fuzz testing, the following issue was discovered:
BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30 _copy_to_iter+0x598/0x2a30 __skb_datagram_iter+0x168/0x1060 skb_copy_datagram_iter+0x5b/0x220 netlink_recvmsg+0x362/0x1700 sock_recvmsg+0x2dc/0x390 __sys_recvfrom+0x381/0x6d0 __x64_sys_recvfrom+0x130/0x200 x64_sys_call+0x32c8/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was stored to memory at: copy_to_user_state_extra+0xcc1/0x1e00 dump_one_state+0x28c/0x5f0 xfrm_state_walk+0x548/0x11e0 xfrm_dump_sa+0x1e0/0x840 netlink_dump+0x943/0x1c40 __netlink_dump_start+0x746/0xdb0 xfrm_user_rcv_msg+0x429/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Uninit was created at: __kmalloc+0x571/0xd30 attach_auth+0x106/0x3e0 xfrm_add_sa+0x2aa0/0x4230 xfrm_user_rcv_msg+0x832/0xc00 netlink_rcv_skb+0x613/0x780 xfrm_netlink_rcv+0x77/0xc0 netlink_unicast+0xe90/0x1280 netlink_sendmsg+0x126d/0x1490 __sock_sendmsg+0x332/0x3d0 ____sys_sendmsg+0x863/0xc30 ___sys_sendmsg+0x285/0x3e0 __x64_sys_sendmsg+0x2d6/0x560 x64_sys_call+0x1316/0x3cc0 do_syscall_64+0xd8/0x1c0 entry_SYSCALL_64_after_hwframe+0x79/0x81
Bytes 328-379 of 732 are uninitialized Memory access of size 732 starts at ffff88800e18e000 Data copied to user address 00007ff30f48aff0
CPU: 2 PID: 18167 Comm: syz-executor.0 Not tainted 6.8.11 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
Fixes copying of xfrm algorithms where some random data of the structure fields can end up in userspace. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.
A similar issue was resolved in the commit 8222d5910dae ("xfrm: Zero padding when dumping algos and encap")
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade rvUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headers | Dec 19, 2024 | Nov 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-devel | Mar 14, 2025 | Nov 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-headersUpgrade kernel-tools-devel | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 5, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 12, 2024 | Nov 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 10, 2025 | Nov 5, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade bpftool-debuginfo | Feb 5, 2026 | Dec 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-24.04 | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub