In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_report() struct xfrm_user_report is a __u8 proto field followed by a struct xfrm_selector which means there is three "empty" bytes of padding, but the padding is never zeroed before copying to userspace. Fix that up by zeroing the structure before setting individual member variables.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-401
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc130840> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc2a76c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc553e40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc133680> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc130a80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702bfc133a00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x702b70375d00> | Operating System |
| linux | linux_kernel | 2.6.19 | <built-in method update of dict object at 0x702bfc2a5880> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bdd5d6780> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bfc130980> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bfc1304c0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bfc2a6000> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702b70376600> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bcc9b0900> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x702bfc2a5380> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.19:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |