linux/net/mctp
Jeremy Kerr b37da3ac09 net: mctp: ensure our nlmsg responses are initialised
[ Upstream commit a6a9bc544b ]

Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from
DEVCORE Research Team working with Trend Micro Zero Day Initiative
report that a RTM_GETNEIGH will return uninitalised data in the pad
bytes of the ndmsg data.

Ensure we're initialising the netlink data to zero, in the link, addr
and neigh response messages.

Fixes: 831119f887 ("mctp: Add neighbour netlink interface")
Fixes: 06d2f4c583 ("mctp: Add netlink route management")
Fixes: 583be982d9 ("mctp: Add device handling and netlink interface")
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20260209-dev-mctp-nlmsg-v1-1-f1e30c346a43@codeconstruct.com.au
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Li hongliang <1468888505@139.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2026-06-19 13:33:22 +02:00
..
af_mctp.c net: mctp: Prevent duplicate binds 2025-08-28 16:24:20 +02:00
device.c net: mctp: ensure our nlmsg responses are initialised 2026-06-19 13:33:22 +02:00
Kconfig mctp: Add MCTP base 2021-07-29 15:06:49 +01:00
Makefile mctp: Add neighbour implementation 2021-07-29 15:06:50 +01:00
neigh.c net: mctp: ensure our nlmsg responses are initialised 2026-06-19 13:33:22 +02:00
route.c net: mctp: ensure our nlmsg responses are initialised 2026-06-19 13:33:22 +02:00