Linux Kernel TIPC Bearer Name Attribute Length Vulnerability

A vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem has been addressed. The issue involved improper validation of attribute lengths for bearer names, which could lead to the use of uninitialized values. This vulnerability was identified during KMSAN (Kernel Memory Sanitizer) testing, where it was found that the TIPC_NLA_BEARER_NAME attribute could be exploited due to insufficient length checks, potentially allowing for the introduction of 'illegal names' in printed messages.

Impact

Exploitation of this vulnerability could lead to the use of uninitialized values, which may cause undefined behavior in the kernel.