Linux Kernel Uninitialized Variable Vulnerability in RTL8712 USB Driver

Vulnerability

A vulnerability in the Linux kernel's RTL8712 USB driver has been addressed, concerning an uninitialized variable issue in the 'r871xu_drv_init' function. The problem arises when the 'tmpU1b' variable, after calling 'r8712_read8' with the 'EE_9346CR' parameter, returns 0. In this case, the 'mac[6]' variable remains uninitialized, potentially leading to undefined behavior. This issue was detected by the Kernel Memory Sanitizer (KMSAN), which reported the uninitialized value in the 'r871xu_drv_init' function.

Impact

The vulnerability could lead to the use of an uninitialized variable, which may cause undefined behavior in the driver.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.