Description
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Linux kernel (KVM)
Fixed in kernel 6.2affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2179892 ↗
- https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/ ↗
- https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952 ↗
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html ↗
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html ↗