Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54034

iommufd: Make sure to zero vfio_iommu_type1_info before copying to user

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Make sure to zero vfio_iommu_type1_info before copying to user Missed a zero initialization here. Most of the struct is filled with a copy_from_user(), however minsz for that copy is smaller than the actual struct by 8 bytes, thus we don't fill the padding.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d624d6652a65ad4f47a58b8651a1ec1163bb81d3 to < 7adcec686e4d699c169d34c722132b2bce5232cbaffected
  • d624d6652a65ad4f47a58b8651a1ec1163bb81d3 to < b3551ead616318ea155558cdbe7e91495b8d9b33affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References