Description
In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix stack information leak The tty driver name is used also after registering the driver and must specifically not be allocated on the stack to avoid leaking information to user space (or triggering an oops). Drivers should not try to encode topology information in the tty device name but this one snuck in through staging without anyone noticing and another driver has since copied this malpractice. Fixing the ABI is a separate issue, but this at least plugs the security hole.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ba4dc61fe8c545a5d6a68b63616776556b771f51 to < acb96e782bad427ca4bb1bd94af660acd1462380affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 741ea2670e021350e54f491106bdaa22dc50e6a0affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 2725925982dc96a78069cd118ea3d66759bfdad7affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 829f13d6079cf7a2465522f39acb43033e9b320daffectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 8657158a3b68c85234e6da3d8eae33d6183588b7affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 5f6a309a699675680df15d9b6d389114515b4426affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < 0a9c36a2e06a249acbed64e8e0b84637c2ad7575affectedba4dc61fe8c545a5d6a68b63616776556b771f51 to < a89936cce87d60766a75732a9e7e25c51164f47caffected
Linux Linux
Default version status: affected
3.5affected0 to < 3.5unaffected4.4.286 to ≤ 4.4.*unaffected4.9.285 to ≤ 4.9.*unaffected4.14.249 to ≤ 4.14.*unaffected4.19.209 to ≤ 4.19.*unaffected5.4.151 to ≤ 5.4.*unaffected5.10.71 to ≤ 5.10.*unaffected5.14.10 to ≤ 5.14.*unaffected5.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/acb96e782bad427ca4bb1bd94af660acd1462380 ↗
- https://git.kernel.org/stable/c/741ea2670e021350e54f491106bdaa22dc50e6a0 ↗
- https://git.kernel.org/stable/c/2725925982dc96a78069cd118ea3d66759bfdad7 ↗
- https://git.kernel.org/stable/c/829f13d6079cf7a2465522f39acb43033e9b320d ↗
- https://git.kernel.org/stable/c/8657158a3b68c85234e6da3d8eae33d6183588b7 ↗
- https://git.kernel.org/stable/c/5f6a309a699675680df15d9b6d389114515b4426 ↗
- https://git.kernel.org/stable/c/0a9c36a2e06a249acbed64e8e0b84637c2ad7575 ↗
- https://git.kernel.org/stable/c/a89936cce87d60766a75732a9e7e25c51164f47c ↗