Description
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled. Specify __GFP_ZERO for the devm_krealloc() to ensure any extra space is cleared.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to < b4f53cec8cc94b37601ce0bb2b272b6753beed98affected95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to < b5c2f21f645e40c70fda2a4283e6f2a81e5cb9f2affected95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to < b134ef820610bd873c9d59999d9824710964ce82affected95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to < 3a87212b1a09a1fdd730ce5520f7b1fc0b488511affected95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to < 5330036bc68d23672bfcc16c60c54701ae123083affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.56 to ≤ 6.18.*unaffected7.2.10 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b4f53cec8cc94b37601ce0bb2b272b6753beed98 ↗
- https://git.kernel.org/stable/c/b5c2f21f645e40c70fda2a4283e6f2a81e5cb9f2 ↗
- https://git.kernel.org/stable/c/b134ef820610bd873c9d59999d9824710964ce82 ↗
- https://git.kernel.org/stable/c/3a87212b1a09a1fdd730ce5520f7b1fc0b488511 ↗
- https://git.kernel.org/stable/c/5330036bc68d23672bfcc16c60c54701ae123083 ↗