Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: always initialize cqe.result The spec doesn't mandate that the first two double words (aka results) for the command queue entry need to be set to 0 when they are not used (not specified). Though, the target implemention returns 0 for TCP and FC but not for RDMA. Let's make RDMA behave the same and thus explicitly initializing the result field. This prevents leaking any data from the stack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a07b4970f464f13640e28e16dad6cfa33647cc99 to < c6a2cf8b0764f3ba7d9bff58c8775a6d4476bb29affecteda07b4970f464f13640e28e16dad6cfa33647cc99 to < 30d35b24b7957922f81cfdaa66f2e1b1e9b9aed2affecteda07b4970f464f13640e28e16dad6cfa33647cc99 to < 10967873b80742261527a071954be8b54f0f8e4daffecteda07b4970f464f13640e28e16dad6cfa33647cc99 to < 0990e8a863645496b9e3f91cfcfd63cd95c80319affecteda07b4970f464f13640e28e16dad6cfa33647cc99 to < cd0c1b8e045a8d2785342b385cb2684d9b48e426affected
Linux Linux
Default version status: affected
4.8affected0 to < 4.8unaffected5.15.209 to ≤ 5.15.*unaffected6.1.101 to ≤ 6.1.*unaffected6.6.42 to ≤ 6.6.*unaffected6.9.11 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c6a2cf8b0764f3ba7d9bff58c8775a6d4476bb29 ↗
- https://git.kernel.org/stable/c/30d35b24b7957922f81cfdaa66f2e1b1e9b9aed2 ↗
- https://git.kernel.org/stable/c/10967873b80742261527a071954be8b54f0f8e4d ↗
- https://git.kernel.org/stable/c/0990e8a863645496b9e3f91cfcfd63cd95c80319 ↗
- https://git.kernel.org/stable/c/cd0c1b8e045a8d2785342b385cb2684d9b48e426 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗