Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with __GFP_ZERO to avoid leaking information to userspace.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 41e27a6aca608c9e04f091c29c420d03fafe0313; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 3ae878f262bd1445c8c31511856a99962a05fe16; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before fde25641cbddd0c084e3320d08f755e7e6acfae5; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 690fb82c4122f8c2656fa4f842275132771b68b9; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 00335df9da2011e095f846d645cc2e9fd2907659; affected 8c773d53fb7b64267b0f55c1d3517cb8c5e29b3c before 9c1523803445ee0348f62b77793266dd981596e0 |
| Linux / Linux | affected 5.15; unaffected 0 before 5.15; unaffected 5.15.217 through 5.15.*; unaffected 6.1.184 through 6.1.*; unaffected 6.6.148 through 6.6.*; unaffected 6.12.101 through 6.12.*; unaffected 6.18.42 through 6.18.*; unaffected 7.1.5 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/41e27a6aca608c9e04f091c29c420d03fafe0313
- https://git.kernel.org/stable/c/3ae878f262bd1445c8c31511856a99962a05fe16
- https://git.kernel.org/stable/c/fde25641cbddd0c084e3320d08f755e7e6acfae5
- https://git.kernel.org/stable/c/5e88c1bc3a41d9a260dd42bae8ad18fd4f35bbe1
- https://git.kernel.org/stable/c/690fb82c4122f8c2656fa4f842275132771b68b9
- https://git.kernel.org/stable/c/00335df9da2011e095f846d645cc2e9fd2907659
- https://git.kernel.org/stable/c/9c1523803445ee0348f62b77793266dd981596e0