PT-2024-28427 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-04-08
·
Updated
2025-09-29
·
CVE-2024-39301
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability has been resolved in the Linux kernel, specifically in the net/9p module, where an uninitialized value was found in the
p9 client rpc() function. This issue was reported by Syzbot with the help of KMSAN, which detected an uninit-value in trace 9p client res() and p9 client rpc(). The problem occurs when p9 check errors() fails early in p9 client rpc(), causing req->rc.tag to not be properly initialized, but trace 9p client res() attempts to print it out anyway before p9 client rpc() finishes. The fix involves assigning default values to p9 fcall fields such as tag and id during the tag allocation stage.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu