Linux Kernel Seg6 Nexthop Address Validation Vulnerability

A vulnerability in the Linux kernel's segment routing (seg6) implementation has been addressed. The issue arose because the kernel did not properly validate the length of nexthop addresses, allowing user space to specify a shorter length than required. This discrepancy could lead to the kernel accessing uninitialized memory. The vulnerability has been fixed by ensuring that the provided length matches the specified length exactly.

Impact

Exploitation of this vulnerability could result in the kernel reading uninitialized memory, which may lead to information disclosure or other unintended behavior.