SECUFOCUSNOW
Home›CVE index›CVE-2024-38538
Review reviewHigh

CVE-2024-38538

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To fix it check if we can actually pull that amount instead of assuming. Tested with dropwatch: drop at: br_dev_xmit+0xb93/0x12d0 [bridge] (0xffffffffc06739b3) origin: software timestamp: Mon May 13 11:31:53 2024 778214037 nsec protocol: 0x88a8 length: 2 original length: 2 drop reason: PKT_TOO_SMALL [1] BUG: KMSAN: uninit-value in br_dev_...

CVSS
7.1
EPSS
0.28%
20.5% percentile
CISA KEV
Not listed
Published
2024.06.19
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.28%
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To fix it check if we can actually pull that amount instead of assuming. Tested with dropwatch: drop at: br_dev_xmit+0xb93/0x12d0 [bridge] (0xffffffffc06739b3) origin: software timestamp: Mon May 13 11:31:53 2024 778214037 nsec protocol: 0x88a8 length: 2 original length: 2 drop reason: PKT_TOO_SMALL [1] BUG: KMSAN: uninit-value in br_dev_...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3e01fc3c66e65d9afe98f1489047a1b2dd8741ca, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b2b7c43cd32080221bb233741bd6011983fe7c11, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 82090f94c723dab724b1c32db406091d40448a17, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c964429ef53f42098a6545a5dabeb1441c1e821d, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 28126b83f86ab9cc7936029c2dff845d3dcedba2, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1abb371147905ba250b4cc0230c4be7e90bea4d5, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f482fd4ce919836a49012b2d31b00fc36e2488f2, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5b5d669f569807c7ab07546e73c0741845a2547a, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8bd67ebb50c0145fd2ca8681ab65eb7e8cde1afc, >= 2.6.12, >= 2.6.12 < 6.1.93, >= 6.2 < 6.6.33, >= 6.7 < 6.8.12, >= 6.9 < 6.9.3
Fixed versions
6.1.93, 6.6.33, 6.8.12, 6.9.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
CWE-908
CVE-2024-38538 — Linux Linux, linux kernel | SECUFOCUS NOW