Lucene search
K

9 matches found

RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.1 views

kernel: nbd: always initialize struct msghdr completely

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

4.4CVSS6.8AI score0.00008EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2024/03/18 2:23 p.m.30 views

CVE-2024-26638

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

4.4CVSS6.5AI score0.00008EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2024/03/18 11:15 a.m.38 views

CVE-2024-26638

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

4.4CVSS6.3AI score0.00008EPSS
Exploits0References14
Cvelist
Cvelist
added 2024/03/18 10:14 a.m.25 views

CVE-2024-26638 nbd: always initialize struct msghdr completely

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

7.5AI score0.00008EPSS
Exploits0References4
CVE
CVE
added 2024/03/18 10:14 a.m.182 views

CVE-2024-26638

CVE-2024-26638 affects Linux kernel nbd: the patch fixes a KMSAN warning by always zero-initializing the msghdr structure (preventing uninitialized fields like msg_get_inq from leaking into recv paths). The issue arises because several recent msghdr fields could be left with indeterminate values,...

4.4CVSS5.7AI score0.00008EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2024/03/18 10:14 a.m.34 views

CVE-2024-26638

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

4.4CVSS7AI score0.00008EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/03/18 10:14 a.m.22 views

CVE-2024-26638 nbd: always initialize struct msghdr completely

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

6.6AI score0.00008EPSS
Exploits0References4
OSV
OSV
added 2024/03/18 10:14 a.m.5 views

CVE-2024-26638 nbd: always initialize struct msghdr completely

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...

4.4CVSS5.9AI score0.00008EPSS
Exploits0References7
Packet Storm
Packet Storm
added 2019/12/16 12:0 a.m.195 views

Linux sendmsg() Privilege Escalation

Linux: privilege escalation via iouring offload of sendmsg onto kernel thread with kernel creds Since commit 0fa03c624d8f "iouring: add support for sendmsg", first in v5.3, iouring has support for asynchronously calling sendmsg. Unprivileged userspace tasks can submit IORINGOPSENDMSG submission...

0.6AI score0.00935EPSS
Exploits2
Rows per page
Query Builder