Description
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
455a2a1af92651764e9eb42cec0d95ac142afc28 to < 135ac58097fa5fc707bf392c5cececf59e4080c0affected455a2a1af92651764e9eb42cec0d95ac142afc28 to < 48a4ee65e677559776349128e6a81a6041986c99affected7dd28904c42ee3b0728c0692dd3332c2c83e8f33affected7.1.5 to < 7.2affected
Linux Linux
Default version status: affected
7.2affected0 to < 7.2unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected