Description
In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy_to_user(). This patch fixes that by initializing the whole struct to 0.
Product status
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before 0479b6e9f999cc1cbad7d9f09f574fc387e605d5
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before f88f8e4485b437e0a2f96a7ff1f88aa22d925659
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before cefeed44296261173a806bef988b26bc565da4be
6.18
Any version before 6.18
6.18.30 (semver)
7.0.7 (semver)
7.1-rc3 (original_commit_for_fix)
References
git.kernel.org/...c/0479b6e9f999cc1cbad7d9f09f574fc387e605d5
git.kernel.org/...c/f88f8e4485b437e0a2f96a7ff1f88aa22d925659
git.kernel.org/...c/cefeed44296261173a806bef988b26bc565da4be