Description
In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited to uptodate folios; !uptodate folios can contain uninitialized data. Since FUSE_NOTIFY_RETRIEVE is intended to only return data that is already in the page cache and not wait for data from the FUSE daemon, treat !uptodate folios as if they weren't present. This only has security impact on systems that don't enable automatic zero-initialization of all page allocations via CONFIG_INIT_ON_ALLOC_DEFAULT_ON or init_on_alloc=1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < feafe8ccb1584254f59fbd4946d6ca7ef1e3e99caffected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 651801d75ad0897dbd331b3cc6a4da3e78f60d42affected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 4e14f29473eda18fb2af082dd2fd4c12139862cdaffected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 8bef2f840b43e0879478fe3aaa9ff2f0b80798a5affected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 68a9282d5ea5b8780d59122505ad633e6daede90affected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 56763afa013444a9d84ca1b74e4b7130942177baaffected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 1fb8735a3a4d894f8c1f90b741a3ab1d3817f9bdaffected2d45ba381a74a743eeaa2b06c7c5c0d2bf73ba1a to < 4e3d1b2c48ca6c55f1e9ca7f8dccc76f120f276caffected
Linux Linux
Default version status: affected
2.6.36affected0 to < 2.6.36unaffected5.10.260 to ≤ 5.10.*unaffected5.15.211 to ≤ 5.15.*unaffected6.1.177 to ≤ 6.1.*unaffected6.6.144 to ≤ 6.6.*unaffected6.12.95 to ≤ 6.12.*unaffected6.18.36 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/feafe8ccb1584254f59fbd4946d6ca7ef1e3e99c ↗
- https://git.kernel.org/stable/c/651801d75ad0897dbd331b3cc6a4da3e78f60d42 ↗
- https://git.kernel.org/stable/c/4e14f29473eda18fb2af082dd2fd4c12139862cd ↗
- https://git.kernel.org/stable/c/8bef2f840b43e0879478fe3aaa9ff2f0b80798a5 ↗
- https://git.kernel.org/stable/c/68a9282d5ea5b8780d59122505ad633e6daede90 ↗
- https://git.kernel.org/stable/c/56763afa013444a9d84ca1b74e4b7130942177ba ↗
- https://git.kernel.org/stable/c/1fb8735a3a4d894f8c1f90b741a3ab1d3817f9bd ↗
- https://git.kernel.org/stable/c/4e3d1b2c48ca6c55f1e9ca7f8dccc76f120f276c ↗
- https://project-zero.issues.chromium.org/issues/514653451 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗