Description
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop. To fix the issue initialize orig_head and head_page before calling rb_validate_buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to < a4afdff9c715af50cf6c3f2dc601932c2cea17a2affected5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to < bc77986f3cb7476637052edf2d87137fa39f153daffected5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to < d9942396845fef2369478c157b26738fe07142f6affected5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to < f1547779402c4cd67755c33616b7203baa88420baffected
Linux Linux
Default version status: affected
6.12affected0 to < 6.12unaffected6.12.114 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected