Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg. Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field. The fix simply zeroes tcm_info alongside the other fields that are already initialized.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < 903c3405cfcc7700260e456ab66a5867586c9e69affected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < 71a3eda7e850ae844cb8993065f4e410c11a46ceaffected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < 4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3affected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < e35f5195cd44ff4053fbc5d71ea97681728a0099affected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < d6db08484c6cb3d4ad696246f9d288eceba2a078affected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < 906997ea3766c24fbbf9cc4bf17c047315bbd138affected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < 1091b3c174441a52fdbb92e2fe00338f9371a91caffected32a4f5ecd7381f30ae3bb36dea77a150ba68af2e to < e6e3eb5ee89ac4c163d46429391c889a1bb5e404affected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.168 to ≤ 6.1.*unaffected6.6.134 to ≤ 6.6.*unaffected6.12.81 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/903c3405cfcc7700260e456ab66a5867586c9e69 ↗
- https://git.kernel.org/stable/c/71a3eda7e850ae844cb8993065f4e410c11a46ce ↗
- https://git.kernel.org/stable/c/4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3 ↗
- https://git.kernel.org/stable/c/e35f5195cd44ff4053fbc5d71ea97681728a0099 ↗
- https://git.kernel.org/stable/c/d6db08484c6cb3d4ad696246f9d288eceba2a078 ↗
- https://git.kernel.org/stable/c/906997ea3766c24fbbf9cc4bf17c047315bbd138 ↗
- https://git.kernel.org/stable/c/1091b3c174441a52fdbb92e2fe00338f9371a91c ↗
- https://git.kernel.org/stable/c/e6e3eb5ee89ac4c163d46429391c889a1bb5e404 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗