Description
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory. Fix this by adding the __GFP_ZERO flag to allocations for writes.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < 9f4af4cf08f9a0329ade3d938f55d2220c40d0a6affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < 129f95948a96105c1fad8e612c9097763e88ac5faffected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < 3fd11fe4f20756b4c0847f755a64cd96f8c6a005affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < cf6b45ea7a8df0f61bded1dc4a8561ac6ad143d2affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < d418313bd8f55c079a7da12651951b489a638ac1affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < 23a19655fb56f241e592041156dfb1c6d04da644affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < ebc0e91ba76dc6544fff9f5b66408b1982806a00affected7ba1ba12eeef0aa7113beb16410ef8b7c748e18b to < 899ee2c3829c5ac14bfc7d3c4a5846c0b709b78faffected
Linux Linux
Default version status: affected
2.6.27affected0 to < 2.6.27unaffected4.19.322 to ≤ 4.19.*unaffected5.4.284 to ≤ 5.4.*unaffected5.10.226 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9f4af4cf08f9a0329ade3d938f55d2220c40d0a6 ↗
- https://git.kernel.org/stable/c/129f95948a96105c1fad8e612c9097763e88ac5f ↗
- https://git.kernel.org/stable/c/3fd11fe4f20756b4c0847f755a64cd96f8c6a005 ↗
- https://git.kernel.org/stable/c/cf6b45ea7a8df0f61bded1dc4a8561ac6ad143d2 ↗
- https://git.kernel.org/stable/c/d418313bd8f55c079a7da12651951b489a638ac1 ↗
- https://git.kernel.org/stable/c/23a19655fb56f241e592041156dfb1c6d04da644 ↗
- https://git.kernel.org/stable/c/ebc0e91ba76dc6544fff9f5b66408b1982806a00 ↗
- https://git.kernel.org/stable/c/899ee2c3829c5ac14bfc7d3c4a5846c0b709b78f ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗