Linux Kernel VXLAN Uninitialized Value Vulnerability in Netlink Message Handling

A vulnerability in the Linux kernel's VXLAN (Virtual Extensible LAN) implementation has been identified, specifically in the netlink message handling. The issue arises in the function 'vxlan_vnifilter_dump()', where the function can access bytes beyond the intended message payload. This occurs if the netlink message payload length is less than the size of the expected structure, leading to the potential exposure of uninitialized memory. The vulnerability has been addressed by modifying the function to return an error in such cases.

Impact

Exploitation of this vulnerability could lead to accessing uninitialized memory, which may cause unpredictable behavior in the kernel or potentially be exploited to execute arbitrary code.