Thread (3 messages) 3 messages, 3 authors, 2025-10-30

Re: [PATCH v3] net: sctp: fix KMSAN uninit-value in sctp_inq_pop

From: patchwork-bot+netdevbpf@kernel.org
Date: 2025-10-30 10:50:29
Also in: linux-sctp, lkml

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni [off-list ref]:

On Sun, 26 Oct 2025 22:03:12 +0530 you wrote:
Fix an issue detected by syzbot:

KMSAN reported an uninitialized-value access in sctp_inq_pop
BUG: KMSAN: uninit-value in sctp_inq_pop

The issue is actually caused by skb trimming via sk_filter() in sctp_rcv().
In the reproducer, skb->len becomes 1 after sk_filter(), which bypassed the
original check:

[...]
Here is the summary with links:
  - [v3] net: sctp: fix KMSAN uninit-value in sctp_inq_pop
    https://git.kernel.org/netdev/net/c/51e5ad549c43

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help