Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 27ce405039bfe6d3f4143415c638f56a3df77dca before e7ea60184e1e88a3c9e437b3265cbb6439aa7e26; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 3f9e88f2672c4635960570ee9741778d4135ecf5; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before d7dc68d82ab3fcfc3f65322465da3d7031d4ab46; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 05ade5d4337867929e7ef664e7ac8e0c734f1aaf; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 9d9f5c75c0c7f31766ec27d90f7a6ac673193191; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 492015e6249fbcd42138b49de3c588d826dd9648; affected 27ce405039bfe6d3f4143415c638f56a3df77dca before 177f25d1292c7e16e1199b39c85480f7f8815552; affected b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7; affected fe6c9b48ebc920ff21c10c50ab2729440c734254; affected 3.10.16 before 3.11; affected 3.11.5 before 3.12 |
| Linux / Linux | affected 3.12; unaffected 0 before 3.12; unaffected 4.19.324 through 4.19.*; unaffected 5.4.286 through 5.4.*; unaffected 5.10.230 through 5.10.*; unaffected 5.15.172 through 5.15.*; unaffected 6.1.117 through 6.1.*; unaffected 6.6.61 through 6.6.*; unaffected 6.11.8 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26
- https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5
- https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46
- https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf
- https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b
- https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191
- https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648
- https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552
ADP enrichment
No English description supplied.
No English description supplied.
No English description supplied.