VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Aug 17, 2024· Updated May 12, 2026

CVE-2024-42283

CVE-2024-42283

Description

In the Linux kernel, the following vulnerability has been resolved:

net: nexthop: Initialize all fields in dumped nexthops

struct nexthop_grp contains two reserved fields that are not initialized by nla_put_nh_group(), and carry garbage. This can be observed e.g. with strace (edited for clarity):

# ip nexthop add id 1 dev lo # ip nexthop add id 101 group 1 # strace -e recvmsg ip nexthop get id 101 ... recvmsg(... [{nla_len=12, nla_type=NHA_GROUP}, [{id=1, weight=0, resvd1=0x69, resvd2=0x67}]] ...) = 52

The fields are reserved and therefore not currently used. But as they are, they leak kernel memory, and the fact they are not just zero complicates repurposing of the fields for new ends. Initialize the full structure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

In the Linux kernel, the nexthop dump operation leaks kernel memory via uninitialized reserved fields in struct nexthop_grp.

The vulnerability is an information disclosure in the Linux kernel's nexthop subsystem. When dumping nexthop groups via netlink, the kernel fails to initialize two reserved fields in the struct nexthop_grp, causing uninitialized kernel memory to be leaked to user space.

An attacker with local access and the ability to issue netlink requests (e.g., via the ip command) can exploit this by reading the dumped nexthop group data. No special privileges are required beyond the ability to use netlink sockets.

The leaked memory may contain sensitive kernel data, potentially aiding in the exploitation of other vulnerabilities. The reserved fields are not currently used, but the leak violates kernel memory confidentiality.

The issue was fixed in the Linux kernel by initializing the entire structure. The fix has been backported to stable kernels. Siemens has listed this CVE as affecting their SIMATIC S7-1500 TM MFP GNU/Linux subsystem [1].

References
  1. SSA-265688

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

161

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

10

News mentions

0

No linked articles in our index yet.