]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero...
authorYochai Eisenrich <echelonh@gmail.com>
Tue, 24 Mar 2026 22:49:25 +0000 (00:49 +0200)
committerJakub Kicinski <kuba@kernel.org>
Fri, 27 Mar 2026 03:38:35 +0000 (20:38 -0700)
commitae05340ccaa9d347fe85415609e075545bec589f
tree26969356dfec717e5fb2226d1b7d53ba489491d6
parent2428083101f6883f979cceffa76cd8440751ffe6
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

When processing Router Advertisements with user options the kernel
builds an RTM_NEWNDUSEROPT netlink message. The nduseroptmsg struct
has three padding fields that are never zeroed and can leak kernel data

The fix is simple, just zeroes the padding fields.

Fixes: 31910575a9de ("[IPv6]: Export userland ND options through netlink (RDNSS support)")
Signed-off-by: Yochai Eisenrich <echelonh@gmail.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20260324224925.2437775-1-echelonh@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/ipv6/ndisc.c