Description
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue. Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to < a876d72ceba7fe5444005239f363c105767e0ecfaffectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < a73f84a30975e6c4ae06efd500d31c82564dba10affectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < c034d8094fee474eb94142c17643eee2919079b7affectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508affectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < be57e52e27c7cbfb400a8f255e475cbcff242baaaffectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < 6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4affectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < 57b01d945ed68cebe486d495dadc4901a96d3aaaaffectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < 1b2820c8a9887981634020db19f1a2425558b88eaffectedf90cf6079bf67988f8b1ad1ade70fc89d0080905 to < 5f8e73bde67e931468bc2a1860d78d72f0c6ba41affected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.136 to ≤ 6.6.*unaffected6.12.83 to ≤ 6.12.*unaffected6.18.24 to ≤ 6.18.*unaffected6.19.14 to ≤ 6.19.*unaffected7.0.1 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a876d72ceba7fe5444005239f363c105767e0ecf ↗
- https://git.kernel.org/stable/c/a73f84a30975e6c4ae06efd500d31c82564dba10 ↗
- https://git.kernel.org/stable/c/c034d8094fee474eb94142c17643eee2919079b7 ↗
- https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508 ↗
- https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa ↗
- https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4 ↗
- https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa ↗
- https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e ↗
- https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41 ↗