Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 455a2a1af92651764e9eb42cec0d95ac142afc28 before 135ac58097fa5fc707bf392c5cececf59e4080c0; affected 455a2a1af92651764e9eb42cec0d95ac142afc28 before 48a4ee65e677559776349128e6a81a6041986c99; affected 7dd28904c42ee3b0728c0692dd3332c2c83e8f33; affected 7.1.5 before 7.2 |
| Linux / Linux | affected 7.2; unaffected 0 before 7.2; unaffected 7.2.7 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.