Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak In tcf_connmark_dump(), the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized bytes leaked to userspace. Initialize the structure with memset before assigning its fields to ensure all members and padding are cleared prior to beign copied.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 218b67c8c8246d47a2a7910eae80abe4861fe2b7affected22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 73cc56c608c209d3d666cc571293b090a471da70affected22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 31e4aa93e2e5b5647fc235b0f6ee329646878f9eaffected22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 51cb05d4fd632596816ba44e882e84db9fb28a7eaffected22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 25837889ec062f2b7618142cd80253dff3da5343affected22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to < 62b656e43eaeae445a39cd8021a4f47065af4389affected
Linux Linux
Default version status: affected
4.0affected0 to < 4.0unaffected5.15.197 to ≤ 5.15.*unaffected6.1.159 to ≤ 6.1.*unaffected6.6.117 to ≤ 6.6.*unaffected6.12.59 to ≤ 6.12.*unaffected6.17.9 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/218b67c8c8246d47a2a7910eae80abe4861fe2b7 ↗
- https://git.kernel.org/stable/c/73cc56c608c209d3d666cc571293b090a471da70 ↗
- https://git.kernel.org/stable/c/31e4aa93e2e5b5647fc235b0f6ee329646878f9e ↗
- https://git.kernel.org/stable/c/51cb05d4fd632596816ba44e882e84db9fb28a7e ↗
- https://git.kernel.org/stable/c/25837889ec062f2b7618142cd80253dff3da5343 ↗
- https://git.kernel.org/stable/c/62b656e43eaeae445a39cd8021a4f47065af4389 ↗