Fixed
Created: Jun 18, 2025
Updated: Jun 1, 2026
Resolved Date: May 25, 2026
Found In Version: 10.22.33.1
Fix Version: 10.22.33.24
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]net: mctp: Don't access ifa_index when missing[EOL][EOL]In mctp_dump_addrinfo, ifa_index can be used to filter interfaces, but[EOL]only when the struct ifaddrmsg is provided. Otherwise it will be[EOL]comparing to uninitialised memory - reproducible in the syzkaller case from[EOL]dhcpd, or busybox "ip addr show".[EOL][EOL]The kernel MCTP implementation has always filtered by ifa_index, so[EOL]existing userspace programs expecting to dump MCTP addresses must[EOL]already be passing a valid ifa_index value (either 0 or a real index).[EOL][EOL]BUG: KMSAN: uninit-value in mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128[EOL] mctp_dump_addrinfo+0x208/0xac0 net/mctp/device.c:128[EOL] rtnl_dump_all+0x3ec/0x5b0 net/core/rtnetlink.c:4380[EOL] rtnl_dumpit+0xd5/0x2f0 net/core/rtnetlink.c:6824[EOL] netlink_dump+0x97b/0x1690 net/netlink/af_netlink.c:2309
