Skip to content
fr Sign in
Not rated

CVE-2025-40278 In the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix…

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . [net?] KMSAN: kernel-infoleak in __skb_datagram_iter In tcf_ife_dump(), the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized bytes leaked to userspace. Initialize the structure with memset before assigning its fields to ensure all members and padding are cleared prior to beign copied. This change silences the KMSAN report and prevents potential information leaks from the kernel memory. This fix has been tested and validated by syzbot. This patch closes the bug reported at the following syzkaller link and ensures no infoleak.

Affected products and versions

Product Affected versions Fixed in
Linux 6.18 earliest → < 6.18 6.18
Linux 6.17 earliest → < 6.17.9 6.17.9
Linux 6.12 earliest → < 6.12.59 6.12.59
Linux 6.6 earliest → < 6.6.117 6.6.117
Linux 6.1 earliest → < 6.1.159 6.1.159
Linux 5.15 earliest → < 5.15.197 5.15.197
Linux 5.10 earliest → < 5.10.247 5.10.247
Linux 5.4 earliest → < 5.4.302 5.4.302
Linux 4.6 No fix stated
Show the other branch
Product Affected versions Fixed in
RUGGEDCOM RST2428P 4.0 earliest → < 4.0 4.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux

The 18283 CVEs of Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated
Track this CVE