In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: núcleo: inicializar en cero el búfer de informes Dado que el búfer de informes es utilizado por todo tipo de controladores de diversas formas, vamos a inicializarlo en cero durante la asignación para asegurarnos de que nunca pueda usarse para filtrar memoria del kernel a través de un informe especialmente manipulado.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-908
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-908
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| android | - | <built-in method update of dict object at 0x7fd34927ebc0> | Operating System | |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd36bacfe00> | Operating System |
| siemens | simatic_s7-1500_tm_mfp_firmware | - | <built-in method update of dict object at 0x7fd31b236400> | Operating System |
| siemens | sinec_os | * | <built-in method update of dict object at 0x7fd31b236f80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34927fc00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34927e4c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b43d000> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34927ec00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd31b237e80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34927d0c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369412a00> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd2dbc0da80> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd36b43c480> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd36a6234c0> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd38542c340> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd37035f440> | Operating System |
| linux | linux_kernel | 6.12 | <built-in method update of dict object at 0x7fd36bacec80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:* |