CVE-2024-26849: netlink: add nla be16/32 types to minlen array

Published Apr 17, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

netlink: add nla be16/32 types to minlen array

BUG: KMSAN: uninit-value in nlavalidaterangeunsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nlavalidateintrange lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validatenla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in nlavalidateparse+0x2e20/0x45c0 lib/nlattr.c:631 nlavalidaterangeunsigned lib/nlattr.c:222 [inline] nlavalidateintrange lib/nlattr.c:336 [inline] validatenla lib/nlattr.c:575 [inline] ...

The message in question matches this policy:

[NFTATARGETREV] = NLAPOLICYMAX(NLABE32, 255),

but because NLABE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute.

Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.

Affected Software

10 affected components
Linux Linux kernel
Linux Linux kernel>=6.1<6.1.81
Linux Linux kernel>=6.2<6.6.21
Linux Linux kernel>=6.7<6.7.9
Linux Linux kernel=6.8-rc1
Linux Linux kernel=6.8-rc2
Linux Linux kernel=6.8-rc3
Linux Linux kernel=6.8-rc4
Linux Linux kernel=6.8-rc5
Linux Linux kernel=6.8-rc6

Event History

Apr 17, 2024
CVE Published
via MITRE·10:14 AM
Data Sourced
via MITRE·10:14 AM
Description
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-26849?

The severity level of CVE-2024-26849 has not been explicitly stated, but it is related to uninitialized values in the Linux kernel, which could lead to security implications.

2

How do I fix CVE-2024-26849?

To fix CVE-2024-26849, update the Linux kernel to a version that includes the patch for this vulnerability.

3

Which versions of the Linux kernel are affected by CVE-2024-26849?

CVE-2024-26849 affects various versions of the Linux kernel, specifically versions between 6.1 and 6.8-rc6.

4

What kind of issue does CVE-2024-26849 represent in the Linux kernel?

CVE-2024-26849 represents a vulnerability involving uninitialized values in netlink attribute validation within the Linux kernel.

5

Is CVE-2024-26849 classified as a critical vulnerability?

CVE-2024-26849 is concerning due to its potential to impact system integrity, but it is important to verify its classification based on the specific context of its usage.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203