CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops
In the Linux kernel, the following vulnerability has been resolved:
net: nexthop: Initialize all fields in dumped nexthops
struct nexthopgrp contains two reserved fields that are not initialized by nlaputnhgroup(), and carry garbage. This can be observed e.g. with strace (edited for clarity):
# ip nexthop add id 1 dev lo # ip nexthop add id 101 group 1 # strace -e recvmsg ip nexthop get id 101 ... recvmsg(... [{nlalen=12, nlatype=NHAGROUP}, [{id=1, weight=0, resvd1=0x69, resvd2=0x67}]] ...) = 52
The fields are reserved and therefore not currently used. But as they are, they leak kernel memory, and the fact they are not just zero complicates repurposing of the fields for new ends. Initialize the full structure.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42283?
CVE-2024-42283 has a medium severity rating as it involves uninitialized fields that could lead to potential information leakage.
How do I fix CVE-2024-42283?
To mitigate CVE-2024-42283, update your Linux kernel to a version that includes the fix, such as 5.10.226-1 or later.
What versions of the Linux kernel are affected by CVE-2024-42283?
CVE-2024-42283 affects multiple versions of the Linux kernel, specifically those between 5.3 and 6.6.44.
Is CVE-2024-42283 a remote exploit vulnerability?
CVE-2024-42283 is not classified as a remote exploit vulnerability; it primarily impacts local data handling.
What is the impact of CVE-2024-42283 on system security?
The impact of CVE-2024-42283 allows the possibility of exposing sensitive information due to uninitialized memory areas.