CVE-2024-26849

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26849
In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ... The message in question matches this policy: [NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255), but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute. Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 Patch
https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d Patch
https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a Patch
https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d Patch
https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 Patch
https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d Patch
https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a Patch
https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
History

03 Feb 2025, 16:18

Type Values Removed Values Added
CWE CWE-908
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 - () https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 - Patch
References () https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d - () https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d - Patch
References () https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a - () https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a - Patch
References () https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d - () https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netlink: agregue tipos nla be16/32 a la matriz minlen ERROR: KMSAN: valor uninit en nla_validate_range_unsigned lib/nlattr.c:222 [en línea] ERROR: KMSAN: valor uninit en nla_validate_int_range lib/nlattr.c:336 [en línea] ERROR: KMSAN: valor uninit en validar_nla lib/nlattr.c:575 [en línea] ERROR: KMSAN: valor uninit en __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [en línea] nla_validate_int_range lib/nlattr.c:336 [en línea] validar_nla lib/nlattr.c:575 [en línea] ... El mensaje en cuestión coincide con esta política: [NFTA_TARGET_REV] = NLA_POLICY_MAX( NLA_BE32, 255), pero debido a que el tamaño de NLA_BE32 en la matriz minlen es 0, el código de validación leerá más allá del atributo con formato incorrecto (demasiado pequeño). Nota: También faltan otros atributos, por ejemplo, BITFIELD32, SINT, UINT...: probablemente también deberían agregarse.
References () https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 - () https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 -
References () https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d - () https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d -
References () https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a - () https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a -
References () https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d - () https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d -

17 Apr 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-17 11:15

Updated : 2025-02-03 16:18

NVD link : CVE-2024-26849

Mitre link : CVE-2024-26849

CVE.ORG link : CVE-2024-26849

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource