Description
In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl In the "pmcmd_ioctl" function, three memory objects allocated by kmalloc are initialized by "hcall_get_cpu_state", which are then copied to user space. The initializer is indeed implemented in "acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of information leakage due to uninitialized bytes.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3d679d5aec648f50e645702929890b9611998a0b to < 4e15cf870d2c748e45d45ffc4d5b1dc1b7d50120affected3d679d5aec648f50e645702929890b9611998a0b to < 524f29d78c9bdeb49f31f5b0376a07d2fc5cf563affected3d679d5aec648f50e645702929890b9611998a0b to < d7e5031fe3f161c8eb5e84db1540bc4373ed861baffected3d679d5aec648f50e645702929890b9611998a0b to < 1b8f7a2caa7f9cdfd135e3f78eb9d7e36fb95083affected3d679d5aec648f50e645702929890b9611998a0b to < a4c21b878f0e237f45209a324c903ea7fb05247daffected3d679d5aec648f50e645702929890b9611998a0b to < 819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bbaffected
Linux Linux
Default version status: affected
5.12affected0 to < 5.12unaffected5.15.179 to ≤ 5.15.*unaffected6.1.131 to ≤ 6.1.*unaffected6.6.83 to ≤ 6.6.*unaffected6.12.19 to ≤ 6.12.*unaffected6.13.7 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4e15cf870d2c748e45d45ffc4d5b1dc1b7d50120 ↗
- https://git.kernel.org/stable/c/524f29d78c9bdeb49f31f5b0376a07d2fc5cf563 ↗
- https://git.kernel.org/stable/c/d7e5031fe3f161c8eb5e84db1540bc4373ed861b ↗
- https://git.kernel.org/stable/c/1b8f7a2caa7f9cdfd135e3f78eb9d7e36fb95083 ↗
- https://git.kernel.org/stable/c/a4c21b878f0e237f45209a324c903ea7fb05247d ↗
- https://git.kernel.org/stable/c/819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bb ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗