In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-401
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a59865c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a5987280> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24246c38c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24245ac840> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23a5987e80> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2424506000> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d2424505580> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23a5985c80> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d24246c1b40> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23a5987940> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23a5987fc0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |