Linux Kernel TIPC Subsystem Uninitialized Value Vulnerability in Netlink Compatibility

A vulnerability has been identified in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem, specifically within the netlink compatibility layer. This issue arises from improper handling of message length checks, which can lead to the use of uninitialized values. The vulnerability was reported by syzbot, highlighting a call trace that reveals the uninitialized value issue during the processing of name table dump headers.

Impact

Exploitation of this vulnerability can lead to the use of uninitialized values, which may cause undefined behavior in the kernel, potentially allowing for memory corruption or other malicious actions.