CVE - CVE-2024-26849

CVE-ID
CVE-2024-26849	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ... The message in question matches this policy: [NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255), but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute. Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 URL:https://git.kernel.org/stable/c/0ac219c4c3ab253f3981f346903458d20bacab32 MISC:https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d URL:https://git.kernel.org/stable/c/7a9d14c63b35f89563c5ecbadf918ad64979712d MISC:https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a URL:https://git.kernel.org/stable/c/9a0d18853c280f6a0ee99f91619f2442a17a323a MISC:https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d URL:https://git.kernel.org/stable/c/a2ab028151841cd833cb53eb99427e0cc990112d
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)