The Netlabel subsystem in the Linux kernel contains a flaw where the function that retrieves address information uses the length of an IPv4 or IPv6 address attribute to decide how much data to read, but it does not independently verify that the accompanying mask attribute is of sufficient length. A crafted Generic Netlink request can therefore supply a valid address attribute with a shorter mask attribute, prompting the kernel to read the mask as a full address structure. This missing validation can lead to an out‑of‑bounds read within the kernel, potentially causing a crash.

All Linux kernel releases prior to the application of the patch that validates unlabeled address and mask attribute lengths. The vulnerability resides in the core netlabel component of the kernel and is not limited to any particular configuration of a system that builds with the default netlabel provider.

The flaw is triggered by a specially crafted Generic Netlink message sent to the netlabel interface. The CVE description does not specify that elevated privileges are required; the attack likely requires access to the local netlink socket, which may be available to users with network or local execution rights. Exploitation can cause a kernel crash, leading to denial of service for the affected system. No public exploit evidence is available, the EPSS score is not disclosed, and the vulnerability is not listed in the CISA KEV catalog, indicating limited known exploitation activity.