Description
In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "[uprobes]" vma xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesn't really matter, debugger can read this memory anyway.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < f31f92107e5a8ecc8902705122c594e979a351feaffectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < fe5e9182d3e227476642ae2b312e2356c4d326a3affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < f561b48d633ac2e7d0d667020fc634a96ade33a0affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 21cb47db1ec9765f91304763a24565ddc22d2492affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 24141df5a8615790950deedd926a44ddf1dfd6d8affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 5b981d8335e18aef7908a068529a3287258ff6d8affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 2aa45f43709ba2082917bd2973d02687075b6eeeaffectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 9634e8dc964a4adafa7e1535147abd7ec29441a6affectedd4b3b6384f98f8692ad0209891ccdbc7e78bbefe to < 34820304cc2cd1804ee1f8f3504ec77813d29c8eaffected
Linux Linux
Default version status: affected
3.5affected0 to < 3.5unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.55 to ≤ 6.6.*unaffected6.10.14 to ≤ 6.10.*unaffected6.11.3 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f31f92107e5a8ecc8902705122c594e979a351fe ↗
- https://git.kernel.org/stable/c/fe5e9182d3e227476642ae2b312e2356c4d326a3 ↗
- https://git.kernel.org/stable/c/f561b48d633ac2e7d0d667020fc634a96ade33a0 ↗
- https://git.kernel.org/stable/c/21cb47db1ec9765f91304763a24565ddc22d2492 ↗
- https://git.kernel.org/stable/c/24141df5a8615790950deedd926a44ddf1dfd6d8 ↗
- https://git.kernel.org/stable/c/5b981d8335e18aef7908a068529a3287258ff6d8 ↗
- https://git.kernel.org/stable/c/2aa45f43709ba2082917bd2973d02687075b6eee ↗
- https://git.kernel.org/stable/c/9634e8dc964a4adafa7e1535147abd7ec29441a6 ↗
- https://git.kernel.org/stable/c/34820304cc2cd1804ee1f8f3504ec77813d29c8e ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗