In the Linux kernel, the following vulnerability has been resolved:
net: mctp: Don't access ifa_index when missing
In mctp_dump_addrinfo, ifa_index can be used to filter interfaces, but only when the struct ifaddrmsg is provided. Otherwise it will be comparing to uninitialised memory - reproducible in the syzkaller case from dhcpd, or busybox "ip addr show".
The kernel MCTP implementation has always filtered by ifa_index, so existing userspace programs expecting to dump MCTP addresses must already be passing a valid ifa_index value (either 0 or a real index).
BUG: KMSAN: uninit-value in mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128 mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128 rtnl_dump_all+0x3ec/0x5b0 net/core/rtnetlink.c:4380 rtnl_dumpit+0xd5/0x2f0 net/core/rtnetlink.c:6824 netlink_dump+0x97b/0x1690 net/netlink/af_netlink.c:2309
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdso | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-5.15Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-gkeopUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-intelUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-azure-fde-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-awsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-oem-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-gke-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-186-fips | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub