GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-42106 (GCVE-0-2024-42106)

Vulnerability from cvelistv5 – Published: 2024-07-30 07:46 – Updated: 2026-05-11 20:27
VLAI
Title
inet_diag: Initialize pad field in struct inet_diag_req_v2
Summary
In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw sockets uses the pad field in struct inet_diag_req_v2 for the underlying protocol. This field corresponds to the sdiag_raw_protocol field in struct inet_diag_req_raw. inet_diag_get_exact_compat() converts inet_diag_req to inet_diag_req_v2, but leaves the pad field uninitialized. So the issue occurs when raw_lookup() accesses the sdiag_raw_protocol field. Fix this by initializing the pad field in inet_diag_get_exact_compat(). Also, do the same fix in inet_diag_dump_compat() to avoid the similar issue in the future. [1] BUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline] BUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_lookup net/ipv4/raw_diag.c:49 [inline] raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564 sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639 __sys_sendmsg net/socket.c:2668 [inline] __do_sys_sendmsg net/socket.c:2677 [inline] __se_sys_sendmsg net/socket.c:2675 [inline] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564 sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639 __sys_sendmsg net/socket.c:2668 [inline] __do_sys_sendmsg net/socket.c:2677 [inline] __se_sys_sendmsg net/socket.c:2675 [inline] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Local variable req.i created at: inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [inline] inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 CPU: 1 PID: 8888 Comm: syz-executor.6 Not tainted 6.10.0-rc4-00217-g35bb670d65fc #32 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:17 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 7094a5fd20ab66028f1da7f06e0f2692d70346f9 (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 0184bf0a349f4cf9e663abbe862ff280e8e4dfa2 (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 7ef519c8efde152e0d632337f2994f6921e0b7e4 (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 8366720519ea8d322a20780debdfd23d9fc0904a (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 76965648fe6858db7c5f3c700fef7aa5f124ca1c (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < f9b2010e8af49fac9d9562146fb81744d8a9b051 (git)
Affected: 432490f9d455fb842d70219f22d9d2c812371676 , < 61cf1c739f08190a4cbf047b9fbb192a94d87e3f (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.10
Unaffected: 0 , < 4.10 (semver)
Unaffected: 4.19.318 , ≤ 4.19.* (semver)
Unaffected: 5.4.280 , ≤ 5.4.* (semver)
Unaffected: 5.10.222 , ≤ 5.10.* (semver)
Unaffected: 5.15.163 , ≤ 5.15.* (semver)
Unaffected: 6.1.98 , ≤ 6.1.* (semver)
Unaffected: 6.6.39 , ≤ 6.6.* (semver)
Unaffected: 6.9.9 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:01:42.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42106",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:17:46.157657Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:07.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/inet_diag.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7094a5fd20ab66028f1da7f06e0f2692d70346f9",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "0184bf0a349f4cf9e663abbe862ff280e8e4dfa2",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "7ef519c8efde152e0d632337f2994f6921e0b7e4",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "8366720519ea8d322a20780debdfd23d9fc0904a",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "76965648fe6858db7c5f3c700fef7aa5f124ca1c",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "f9b2010e8af49fac9d9562146fb81744d8a9b051",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            },
            {
              "lessThan": "61cf1c739f08190a4cbf047b9fbb192a94d87e3f",
              "status": "affected",
              "version": "432490f9d455fb842d70219f22d9d2c812371676",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/inet_diag.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.318",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.280",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.98",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.39",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.318",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.280",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.222",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.163",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.98",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.39",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.9",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet_diag: Initialize pad field in struct inet_diag_req_v2\n\nKMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw\nsockets uses the pad field in struct inet_diag_req_v2 for the\nunderlying protocol. This field corresponds to the sdiag_raw_protocol\nfield in struct inet_diag_req_raw.\n\ninet_diag_get_exact_compat() converts inet_diag_req to\ninet_diag_req_v2, but leaves the pad field uninitialized. So the issue\noccurs when raw_lookup() accesses the sdiag_raw_protocol field.\n\nFix this by initializing the pad field in\ninet_diag_get_exact_compat(). Also, do the same fix in\ninet_diag_dump_compat() to avoid the similar issue in the future.\n\n[1]\nBUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline]\nBUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\n raw_lookup net/ipv4/raw_diag.c:49 [inline]\n raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\n inet_diag_cmd_exact+0x7d9/0x980\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\n __sys_sendmsg net/socket.c:2668 [inline]\n __do_sys_sendmsg net/socket.c:2677 [inline]\n __se_sys_sendmsg net/socket.c:2675 [inline]\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was stored to memory at:\n raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\n inet_diag_cmd_exact+0x7d9/0x980\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\n __sys_sendmsg net/socket.c:2668 [inline]\n __do_sys_sendmsg net/socket.c:2677 [inline]\n __se_sys_sendmsg net/socket.c:2675 [inline]\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nLocal variable req.i created at:\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [inline]\n inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\n\nCPU: 1 PID: 8888 Comm: syz-executor.6 Not tainted 6.10.0-rc4-00217-g35bb670d65fc #32\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:27:07.336Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9"
        },
        {
          "url": "https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4"
        },
        {
          "url": "https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a"
        },
        {
          "url": "https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb"
        },
        {
          "url": "https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c"
        },
        {
          "url": "https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051"
        },
        {
          "url": "https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f"
        }
      ],
      "title": "inet_diag: Initialize pad field in struct inet_diag_req_v2",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42106",
    "datePublished": "2024-07-30T07:46:01.865Z",
    "dateReserved": "2024-07-29T15:50:41.175Z",
    "dateUpdated": "2026-05-11T20:27:07.336Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-42106",
      "date": "2026-09-15",
      "epss": "0.00258",
      "percentile": "0.17639"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ninet_diag: Initialize pad field in struct inet_diag_req_v2\\n\\nKMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw\\nsockets uses the pad field in struct inet_diag_req_v2 for the\\nunderlying protocol. This field corresponds to the sdiag_raw_protocol\\nfield in struct inet_diag_req_raw.\\n\\ninet_diag_get_exact_compat() converts inet_diag_req to\\ninet_diag_req_v2, but leaves the pad field uninitialized. So the issue\\noccurs when raw_lookup() accesses the sdiag_raw_protocol field.\\n\\nFix this by initializing the pad field in\\ninet_diag_get_exact_compat(). Also, do the same fix in\\ninet_diag_dump_compat() to avoid the similar issue in the future.\\n\\n[1]\\nBUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline]\\nBUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_lookup net/ipv4/raw_diag.c:49 [inline]\\n raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nUninit was stored to memory at:\\n raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nLocal variable req.i created at:\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [inline]\\n inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n\\nCPU: 1 PID: 8888 Comm: syz-executor.6 Not tainted 6.10.0-rc4-00217-g35bb670d65fc #32\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: inet_diag: inicializa el campo pad en la estructura inet_diag_req_v2 KMSAN inform\\u00f3 acceso de valor uninit en raw_lookup() [1]. Diag para sockets sin formato utiliza el campo pad en struct inet_diag_req_v2 para el protocolo subyacente. Este campo corresponde al campo sdiag_raw_protocol en la estructura inet_diag_req_raw. inet_diag_get_exact_compat() convierte inet_diag_req en inet_diag_req_v2, pero deja el campo pad sin inicializar. Entonces el problema ocurre cuando raw_lookup() accede al campo sdiag_raw_protocol. Solucione este problema inicializando el campo pad en inet_diag_get_exact_compat(). Adem\\u00e1s, haga la misma correcci\\u00f3n en inet_diag_dump_compat() para evitar problemas similares en el futuro. [1] ERROR: KMSAN: valor uninit en raw_lookup net/ipv4/raw_diag.c:49 [en l\\u00ednea] ERROR: KMSAN: valor uninit en raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_lookup net/ipv4 /raw_diag.c:49 [en l\\u00ednea] raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/ inet_diag.c :1404 [en l\\u00ednea] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670. c:2564 sock_diag_rcv+0x35 /0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [en l\\u00ednea] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c :1905 sock_sendmsg_nosec net/socket.c:730 [en l\\u00ednea] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket. c:2639 __sys_sendmsg net/socket.c:2668 [en l\\u00ednea] __do_sys_sendmsg net/socket.c:2677 [en l\\u00ednea] __se_sys_sendmsg net/socket.c:2675 [en l\\u00ednea] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x13 5e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [en l\\u00ednea] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit se almacen\\u00f3 en la memoria en: raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/inet_diag .c:1404 [en l\\u00ednea] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:256 4 calcet\\u00edn_diag_rcv+0x35/0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [en l\\u00ednea] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [en l\\u00ednea] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket.c:263 9 __sys_sendmsg neto/ socket.c:2668 [en l\\u00ednea] __do_sys_sendmsg net/socket.c:2677 [en l\\u00ednea] __se_sys_sendmsg net/socket.c:2675 [en l\\u00ednea] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x135e/ 0x3ce0 arch/x86 /include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [en l\\u00ednea] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x77/0x7f Variable local req.i creado en: inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [en l\\u00ednea] inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c: 282 procesadores: 1 PID: 8888 Comm: syz-executor.6 No contaminado 6.10.0-rc4-00217-g35bb670d65fc #32 Nombre del hardware: PC est\\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 01/04/2014\"}]",
      "id": "CVE-2024-42106",
      "lastModified": "2024-11-21T09:33:36.830",
      "published": "2024-07-30T08:15:03.100",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-42106\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-30T08:15:03.100\",\"lastModified\":\"2026-06-17T07:48:50.867\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ninet_diag: Initialize pad field in struct inet_diag_req_v2\\n\\nKMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw\\nsockets uses the pad field in struct inet_diag_req_v2 for the\\nunderlying protocol. This field corresponds to the sdiag_raw_protocol\\nfield in struct inet_diag_req_raw.\\n\\ninet_diag_get_exact_compat() converts inet_diag_req to\\ninet_diag_req_v2, but leaves the pad field uninitialized. So the issue\\noccurs when raw_lookup() accesses the sdiag_raw_protocol field.\\n\\nFix this by initializing the pad field in\\ninet_diag_get_exact_compat(). Also, do the same fix in\\ninet_diag_dump_compat() to avoid the similar issue in the future.\\n\\n[1]\\nBUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline]\\nBUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_lookup net/ipv4/raw_diag.c:49 [inline]\\n raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nUninit was stored to memory at:\\n raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nLocal variable req.i created at:\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [inline]\\n inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n\\nCPU: 1 PID: 8888 Comm: syz-executor.6 Not tainted 6.10.0-rc4-00217-g35bb670d65fc #32\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: inet_diag: inicializa el campo pad en la estructura inet_diag_req_v2 KMSAN inform\u00f3 acceso de valor uninit en raw_lookup() [1]. Diag para sockets sin formato utiliza el campo pad en struct inet_diag_req_v2 para el protocolo subyacente. Este campo corresponde al campo sdiag_raw_protocol en la estructura inet_diag_req_raw. inet_diag_get_exact_compat() convierte inet_diag_req en inet_diag_req_v2, pero deja el campo pad sin inicializar. Entonces el problema ocurre cuando raw_lookup() accede al campo sdiag_raw_protocol. Solucione este problema inicializando el campo pad en inet_diag_get_exact_compat(). Adem\u00e1s, haga la misma correcci\u00f3n en inet_diag_dump_compat() para evitar problemas similares en el futuro. [1] ERROR: KMSAN: valor uninit en raw_lookup net/ipv4/raw_diag.c:49 [en l\u00ednea] ERROR: KMSAN: valor uninit en raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_lookup net/ipv4 /raw_diag.c:49 [en l\u00ednea] raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/ inet_diag.c :1404 [en l\u00ednea] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670. c:2564 sock_diag_rcv+0x35 /0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [en l\u00ednea] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c :1905 sock_sendmsg_nosec net/socket.c:730 [en l\u00ednea] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket. c:2639 __sys_sendmsg net/socket.c:2668 [en l\u00ednea] __do_sys_sendmsg net/socket.c:2677 [en l\u00ednea] __se_sys_sendmsg net/socket.c:2675 [en l\u00ednea] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x13 5e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [en l\u00ednea] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit se almacen\u00f3 en la memoria en: raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71 raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99 inet_diag_cmd_exact+0x7d9/0x980 inet_diag_get_exact_compat net/ipv4/inet_diag .c:1404 [en l\u00ednea] inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282 netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:256 4 calcet\u00edn_diag_rcv+0x35/0x40 net/core/sock_diag.c:297 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [en l\u00ednea] netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [en l\u00ednea] __sock_sendmsg+0x332/0x3d0 net/socket.c:745 ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585 ___sys_sendmsg+0x271/0x3b0 net/socket.c:263 9 __sys_sendmsg neto/ socket.c:2668 [en l\u00ednea] __do_sys_sendmsg net/socket.c:2677 [en l\u00ednea] __se_sys_sendmsg net/socket.c:2675 [en l\u00ednea] __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675 x64_sys_call+0x135e/ 0x3ce0 arch/x86 /include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [en l\u00ednea] do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x77/0x7f Variable local req.i creado en: inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [en l\u00ednea] inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426 sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c: 282 procesadores: 1 PID: 8888 Comm: syz-executor.6 No contaminado 6.10.0-rc4-00217-g35bb670d65fc #32 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 01/04/2014\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv4/inet_diag.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"7094a5fd20ab66028f1da7f06e0f2692d70346f9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"7ef519c8efde152e0d632337f2994f6921e0b7e4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"8366720519ea8d322a20780debdfd23d9fc0904a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"76965648fe6858db7c5f3c700fef7aa5f124ca1c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"f9b2010e8af49fac9d9562146fb81744d8a9b051\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"432490f9d455fb842d70219f22d9d2c812371676\",\"lessThan\":\"61cf1c739f08190a4cbf047b9fbb192a94d87e3f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv4/inet_diag.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.10\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.318\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.280\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.222\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.163\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.98\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.39\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.9\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:17:46.157657Z\",\"id\":\"CVE-2024-42106\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-908\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.19.318\",\"matchCriteriaId\":\"195CEBFB-A207-43FE-BB52-EFB434A3E4CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.280\",\"matchCriteriaId\":\"625DBFAB-C3D0-4309-A27F-12D6428FB38F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.222\",\"matchCriteriaId\":\"00696AC5-EE29-437F-97F9-C4D66608B327\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.163\",\"matchCriteriaId\":\"A97DEB09-4927-40F8-B5C6-F5BD5EAE0CFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.98\",\"matchCriteriaId\":\"E09E92A5-27EF-40E4-926A-B1CDC8270551\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.39\",\"matchCriteriaId\":\"29E894E4-668F-4DB0-81F7-4FB5F698E970\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.9.9\",\"matchCriteriaId\":\"ADCC1407-0CB3-4C8F-B4C5-07F682CD7085\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"331C2F14-12C7-45D5-893D-8C52EE38EA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3173713D-909A-4DD3-9DD4-1E171EB057EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"79F18AFA-40F7-43F0-BA30-7BDB65F918B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD973AA4-A789-49BD-8D57-B2846935D3C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F3E9E0C-AC3E-4967-AF80-6483E8AB0078\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-02-02T11:01:28+00:00",
      "cve": "CVE-2024-42106",
      "id": "CVE-2024-42106",
      "initial_release_date": "2024-07-30T00:00:00+00:00",
      "product_status:known_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: inet_diag: Initialize pad field in struct inet_diag_req_v2",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-42106.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-22T16:43:01Z",
      "cve": "CVE-2024-42106",
      "id": "CVE-2024-42106",
      "initial_release_date": "2024-08-06T01:59:56Z",
      "product_status:known_affected": "524",
      "product_status:known_not_affected": "10",
      "product_status:recommended": "743",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-42106",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-42106.json",
      "version": "68"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T04:54:32.551Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-42106\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:17:46.157657Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:14.672Z\"}}], \"cna\": {\"title\": \"inet_diag: Initialize pad field in struct inet_diag_req_v2\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"7094a5fd20ab66028f1da7f06e0f2692d70346f9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"7ef519c8efde152e0d632337f2994f6921e0b7e4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"8366720519ea8d322a20780debdfd23d9fc0904a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"76965648fe6858db7c5f3c700fef7aa5f124ca1c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"f9b2010e8af49fac9d9562146fb81744d8a9b051\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"432490f9d455fb842d70219f22d9d2c812371676\", \"lessThan\": \"61cf1c739f08190a4cbf047b9fbb192a94d87e3f\", \"versionType\": \"git\"}], \"programFiles\": [\"net/ipv4/inet_diag.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.10\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.10\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.318\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.280\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.222\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.163\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.98\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.39\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ipv4/inet_diag.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/7094a5fd20ab66028f1da7f06e0f2692d70346f9\"}, {\"url\": \"https://git.kernel.org/stable/c/0184bf0a349f4cf9e663abbe862ff280e8e4dfa2\"}, {\"url\": \"https://git.kernel.org/stable/c/7ef519c8efde152e0d632337f2994f6921e0b7e4\"}, {\"url\": \"https://git.kernel.org/stable/c/8366720519ea8d322a20780debdfd23d9fc0904a\"}, {\"url\": \"https://git.kernel.org/stable/c/d6f487e0704de2f2d15f8dd5d7d723210f2b2fdb\"}, {\"url\": \"https://git.kernel.org/stable/c/76965648fe6858db7c5f3c700fef7aa5f124ca1c\"}, {\"url\": \"https://git.kernel.org/stable/c/f9b2010e8af49fac9d9562146fb81744d8a9b051\"}, {\"url\": \"https://git.kernel.org/stable/c/61cf1c739f08190a4cbf047b9fbb192a94d87e3f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ninet_diag: Initialize pad field in struct inet_diag_req_v2\\n\\nKMSAN reported uninit-value access in raw_lookup() [1]. Diag for raw\\nsockets uses the pad field in struct inet_diag_req_v2 for the\\nunderlying protocol. This field corresponds to the sdiag_raw_protocol\\nfield in struct inet_diag_req_raw.\\n\\ninet_diag_get_exact_compat() converts inet_diag_req to\\ninet_diag_req_v2, but leaves the pad field uninitialized. So the issue\\noccurs when raw_lookup() accesses the sdiag_raw_protocol field.\\n\\nFix this by initializing the pad field in\\ninet_diag_get_exact_compat(). Also, do the same fix in\\ninet_diag_dump_compat() to avoid the similar issue in the future.\\n\\n[1]\\nBUG: KMSAN: uninit-value in raw_lookup net/ipv4/raw_diag.c:49 [inline]\\nBUG: KMSAN: uninit-value in raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_lookup net/ipv4/raw_diag.c:49 [inline]\\n raw_sock_get+0x657/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nUninit was stored to memory at:\\n raw_sock_get+0x650/0x800 net/ipv4/raw_diag.c:71\\n raw_diag_dump_one+0xa1/0x660 net/ipv4/raw_diag.c:99\\n inet_diag_cmd_exact+0x7d9/0x980\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1404 [inline]\\n inet_diag_rcv_msg_compat+0x469/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n netlink_rcv_skb+0x537/0x670 net/netlink/af_netlink.c:2564\\n sock_diag_rcv+0x35/0x40 net/core/sock_diag.c:297\\n netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]\\n netlink_unicast+0xe74/0x1240 net/netlink/af_netlink.c:1361\\n netlink_sendmsg+0x10c6/0x1260 net/netlink/af_netlink.c:1905\\n sock_sendmsg_nosec net/socket.c:730 [inline]\\n __sock_sendmsg+0x332/0x3d0 net/socket.c:745\\n ____sys_sendmsg+0x7f0/0xb70 net/socket.c:2585\\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2639\\n __sys_sendmsg net/socket.c:2668 [inline]\\n __do_sys_sendmsg net/socket.c:2677 [inline]\\n __se_sys_sendmsg net/socket.c:2675 [inline]\\n __x64_sys_sendmsg+0x27e/0x4a0 net/socket.c:2675\\n x64_sys_call+0x135e/0x3ce0 arch/x86/include/generated/asm/syscalls_64.h:47\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xd9/0x1e0 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\n\\nLocal variable req.i created at:\\n inet_diag_get_exact_compat net/ipv4/inet_diag.c:1396 [inline]\\n inet_diag_rcv_msg_compat+0x2a6/0x530 net/ipv4/inet_diag.c:1426\\n sock_diag_rcv_msg+0x23d/0x740 net/core/sock_diag.c:282\\n\\nCPU: 1 PID: 8888 Comm: syz-executor.6 Not tainted 6.10.0-rc4-00217-g35bb670d65fc #32\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.318\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.280\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.222\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.163\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.98\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.39\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.9\", \"versionStartIncluding\": \"4.10\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"4.10\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:23:08.689Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-42106\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-04T09:23:08.689Z\", \"dateReserved\": \"2024-07-29T15:50:41.175Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-30T07:46:01.865Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.