CVE-2024-57802

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netrom: check buffer length before accessing it

Syzkaller reports an uninit value read from ax25cmp when sending raw message

through ieee802154 implementation.

=====================================================

BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119

ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119

nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601

nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774

nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144

__netdev_start_xmit include/linux/netdevice.h:4940 [inline]

netdev_start_xmit include/linux/netdevice.h:4954 [inline]

xmit_one net/core/dev.c:3548 [inline]

dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564

__dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349

dev_queue_xmit include/linux/netdevice.h:3134 [inline]

raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299

ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96

sock_sendmsg

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References