Description
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded twice inside uinput_ff_upload_compat, contains internal padding. In particular, there is a hole after struct ff_replay to satisfy alignment requirements for the following union member. Without clearing the structure, copy_to_user() may leak stack data to userspace. Initialize ff_up_compat to zero before filling valid fields.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2d56f3a32c0e62f99c043d2579840f9731fe5855 to < 1b317796013f666ae5040edbf0f230ec61496d42affected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < 877172b97786ed1678640dff0b2d35abb328844caffected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < e63aade22a33e77b93c98c9f02db504d897a76b4affected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < 933b87c4590b42500299f00ff55f555903056803affected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < fd8a23ecbc602d00e47b27f20b07350867d0ebe5affected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < 48c96b7e9e03516936d6deba54b5553097eae817affected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < f5e1f3b85aadce74268c46676772c3e9fa79897eaffected2d56f3a32c0e62f99c043d2579840f9731fe5855 to < d3366a04770eea807f2826cbdb96934dd8c9bf79affected
Linux Linux
Default version status: affected
2.6.29affected0 to < 2.6.29unaffected5.4.301 to ≤ 5.4.*unaffected5.10.246 to ≤ 5.10.*unaffected5.15.195 to ≤ 5.15.*unaffected6.1.156 to ≤ 6.1.*unaffected6.6.112 to ≤ 6.6.*unaffected6.12.53 to ≤ 6.12.*unaffected6.17.3 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1b317796013f666ae5040edbf0f230ec61496d42 ↗
- https://git.kernel.org/stable/c/877172b97786ed1678640dff0b2d35abb328844c ↗
- https://git.kernel.org/stable/c/e63aade22a33e77b93c98c9f02db504d897a76b4 ↗
- https://git.kernel.org/stable/c/933b87c4590b42500299f00ff55f555903056803 ↗
- https://git.kernel.org/stable/c/fd8a23ecbc602d00e47b27f20b07350867d0ebe5 ↗
- https://git.kernel.org/stable/c/48c96b7e9e03516936d6deba54b5553097eae817 ↗
- https://git.kernel.org/stable/c/f5e1f3b85aadce74268c46676772c3e9fa79897e ↗
- https://git.kernel.org/stable/c/d3366a04770eea807f2826cbdb96934dd8c9bf79 ↗