In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
Syzbot reports [1] an uninitialized value issue found by KMSAN in dib3000_read_reg().
Local u8 rb[2] is used in i2c_transfer() as a read buffer; in case that call fails, the buffer may end up with some undefined values.
Since no elaborate error handling is expected in dib3000_write_reg(), simply zero out rb buffer to mitigate the problem.
[1] Syzkaller report dvb-usb: bulk message failed: -22 (6/0) ===================================================== BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31 dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290 dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline] dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310 dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110 ... Local variable rb created at: dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54 dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Apr 11, 2025 | Jan 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | May 7, 2025 | Jan 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 1, 2025 | Jan 6, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Jan 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 6, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-oemUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04 | Mar 28, 2025 | Jan 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jan 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub