CVE-2024-26849: netlink: add nla be16/32 types to minlen array
In the Linux kernel, the following vulnerability has been resolved:
netlink: add nla be16/32 types to minlen array
BUG: KMSAN: uninit-value in nlavalidaterangeunsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nlavalidateintrange lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validatenla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in nlavalidateparse+0x2e20/0x45c0 lib/nlattr.c:631 nlavalidaterangeunsigned lib/nlattr.c:222 [inline] nlavalidateintrange lib/nlattr.c:336 [inline] validatenla lib/nlattr.c:575 [inline] ...
The message in question matches this policy:
[NFTATARGETREV] = NLAPOLICYMAX(NLABE32, 255),
but because NLABE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute.
Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26849?
The severity level of CVE-2024-26849 has not been explicitly stated, but it is related to uninitialized values in the Linux kernel, which could lead to security implications.
How do I fix CVE-2024-26849?
To fix CVE-2024-26849, update the Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-26849?
CVE-2024-26849 affects various versions of the Linux kernel, specifically versions between 6.1 and 6.8-rc6.
What kind of issue does CVE-2024-26849 represent in the Linux kernel?
CVE-2024-26849 represents a vulnerability involving uninitialized values in netlink attribute validation within the Linux kernel.
Is CVE-2024-26849 classified as a critical vulnerability?
CVE-2024-26849 is concerning due to its potential to impact system integrity, but it is important to verify its classification based on the specific context of its usage.