CVE-2024-26638

EUVD-2024-23900
In the Linux kernel, the following vulnerability has been resolved:

nbd: always initialize struct msghdr completely

syzbot complains that msg->msg_get_inq value can be uninitialized [1]

struct msghdr got many new fields recently, we should always make
sure their values is zero by default.

[1]
 BUG: KMSAN: uninit-value in tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571
  tcp_recvmsg+0x686/0xac0 net/ipv4/tcp.c:2571
  inet_recvmsg+0x131/0x580 net/ipv4/af_inet.c:879
  sock_recvmsg_nosec net/socket.c:1044 [inline]
  sock_recvmsg+0x12b/0x1e0 net/socket.c:1066
  __sock_xmit+0x236/0x5c0 drivers/block/nbd.c:538
  nbd_read_reply drivers/block/nbd.c:732 [inline]
  recv_work+0x262/0x3100 drivers/block/nbd.c:863
  process_one_work kernel/workqueue.c:2627 [inline]
  process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2700
  worker_thread+0xf45/0x1490 kernel/workqueue.c:2781
  kthread+0x3ed/0x540 kernel/kthread.c:388
  ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147
  ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242

Local variable msg created at:
  __sock_xmit+0x4c/0x5c0 drivers/block/nbd.c:513
  nbd_read_reply drivers/block/nbd.c:732 [inline]
  recv_work+0x262/0x3100 drivers/block/nbd.c:863

CPU: 1 PID: 7465 Comm: kworker/u5:1 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Workqueue: nbd5-recv recv_work
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CISA-ADPADP
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.19 ≤
𝑥
< 6.1.76
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.15
linuxlinux_kernel
6.7 ≤
𝑥
< 6.7.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.148-1
fixed
bookworm (security)
6.1.158-1
fixed
bullseye
5.10.223-1
not-affected
bullseye (security)
5.10.247-1
fixed
buster
not-affected
forky
6.17.13-1
fixed
sid
6.17.13-1
fixed
trixie
6.12.57-1
fixed
trixie (security)
6.12.48-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux-hwe
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-hwe-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-41.41~22.04.2
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-edge
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-lts-xenial
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
not-affected
xenial
dne
linux-kvm
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-allwinner-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-1021.21
released
noble
not-affected
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-41.41
released
noble
not-affected
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux-aws-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-azure
bionic
ignored
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-1022.23
released
noble
not-affected
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux-azure-4.15
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1022.23~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-bluefield
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-edge
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-gcp
bionic
ignored
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-1022.24
released
noble
not-affected
oracular
not-affected
trusty
dne
xenial
not-affected
linux-gcp-4.15
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1022.24~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
ignored
linux-gke-4.15
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke-5.15
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gkeop
bionic
dne
focal
not-affected
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-gkeop-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gkeop-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-ibm
bionic
dne
focal
not-affected
jammy
not-affected
mantic
ignored
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-ibm-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-ibm-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iotg
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iotg-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-iot
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-laptop
bionic
dne
focal
dne
jammy
dne
mantic
Fixed 6.5.0-1017.20
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency
bionic
dne
focal
dne
jammy
not-affected
mantic
Fixed 6.5.0-41.41.1
released
noble
not-affected
oracular
not-affected
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-41.41.1~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-1024.24
released
noble
not-affected
oracular
not-affected
trusty
dne
xenial
not-affected
linux-oracle-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1024.24~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-oem-5.6
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.10
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.14
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.17
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.0
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.1
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1024.25
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-raspi2
bionic
ignored
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-raspi-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
focal
ignored
jammy
ignored
mantic
Fixed 6.5.0-40.40.1
released
noble
not-affected
oracular
not-affected
trusty
dne
xenial
dne
linux-riscv-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-40.40.1~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive
bionic
dne
focal
dne
jammy
dne
mantic
Fixed 6.5.0-1015.16
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-raspi
bionic
dne
focal
not-affected
jammy
not-affected
mantic
Fixed 6.5.0-1018.21
released
noble
not-affected
oracular
not-affected
trusty
dne
xenial
dne
linux-starfive-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1015.16~22.04.1
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-xilinx-zynqmp
bionic
dne
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.5
bionic
dne
focal
dne
jammy
Fixed 6.5.0-1021.22
released
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.8
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-intel
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-lowlatency
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iot-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-raspi-realtime
bionic
dne
focal
dne
jammy
dne
noble
Fixed 6.8.0-2001.1
released
oracular
dne
trusty
dne
xenial
dne
linux-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
not-affected
oracular
not-affected
trusty
dne
xenial
dne
linux-riscv-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne