In the Linux kernel, the following vulnerability has been resolved:
net: mctp: Don't access ifa_index when missing
In mctp_dump_addrinfo, ifa_index can be used to filter interfaces, but only when the struct ifaddrmsg is provided. Otherwise it will be comparing to uninitialised memory - reproducible in the syzkaller case from dhcpd, or busybox "ip addr show".
The kernel MCTP implementation has always filtered by ifa_index, so existing userspace programs expecting to dump MCTP addresses must already be passing a valid ifa_index value (either 0 or a real index).
BUG: KMSAN: uninit-value in mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128 mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128 rtnl_dump_all+0x3ec/0x5b0 net/core/rtnetlink.c:4380 rtnl_dumpit+0xd5/0x2f0 net/core/rtnetlink.c:6824 netlink_dump+0x97b/0x1690 net/netlink/af_netlink.c:2309
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-zfcpdump | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-realtime-6.14Upgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-azureUpgrade linux-image-oracle-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intelUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub