CVE-2024-42106

A vulnerability was found in the Linux kernel in the inet_diag_dump_compat() and inet_diag_get_exact_compat() functions which do not properly initialize the pad field of the inet_diag_req_v2 structure, causing the funtion raw_lookup() to potentially access an uninitialized value. This could lead to memory corruption or undefined behavior.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.