CVE-2024-53680

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()

Under certain kernel configurations when building with Clang/LLVM, the

compiler does not generate a return or jump as the terminator

instruction for ip_vs_protocol_init(), triggering the following objtool

warning during build time:

vmlinux.o: warning: objtool: ip_vs_protocol_init() falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6()

At runtime, this either causes an oops when trying to load the ipvs

module or a boot-time panic if ipvs is built-in. This same issue has

been reported by the Intel kernel test robot previously.

Digging deeper into both LLVM and the kernel code reveals this to be a

undefined behavior problem. ip_vs_protocol_init() uses a on-stack buffer

of 64 chars to store the registered protocol names and leaves it

uninitialized after definition. The function calls strnlen() when

concatenating prot

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References