Message ID | 20240206213012.55794-1-bethany.jamison@canonical.com |
---|---|
Headers | show |
Series | CVE-2023-50431 | expand |
On 24/02/06 03:30PM, Bethany Jamison wrote: > [Impact] > > sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in > the Linux kernel through 6.6.5 allows an information leak to user space > because info->pad0 is not initialized. > > [Fix] > > Clean cherry-pick. > > [Test Case] > > Compile and boot tested. > > [Regression Potential] > > Issues could occur when setting hl_info_sec_attest struct. > > Xingyuan Mo (1): > accel/habanalabs: fix information leak in sec_attest_info() > > drivers/accel/habanalabs/common/habanalabs_ioctl.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Acked-by: Andrei Gherzan <andrei.gherzan@canonical.com>
On 06/02/2024 18:30, Bethany Jamison wrote: > [Impact] > > sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in > the Linux kernel through 6.6.5 allows an information leak to user space > because info->pad0 is not initialized. > > [Fix] > > Clean cherry-pick. > > [Test Case] > > Compile and boot tested. > > [Regression Potential] > > Issues could occur when setting hl_info_sec_attest struct. > Acked-by: Magali Lemes <magali.lemes@canonical.com> > Xingyuan Mo (1): > accel/habanalabs: fix information leak in sec_attest_info() > > drivers/accel/habanalabs/common/habanalabs_ioctl.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) >
On 06/02/2024 22:30, Bethany Jamison wrote: > [Impact] > > sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in > the Linux kernel through 6.6.5 allows an information leak to user space > because info->pad0 is not initialized. > > [Fix] > > Clean cherry-pick. > > [Test Case] > > Compile and boot tested. > > [Regression Potential] > > Issues could occur when setting hl_info_sec_attest struct. > > Xingyuan Mo (1): > accel/habanalabs: fix information leak in sec_attest_info() > > drivers/accel/habanalabs/common/habanalabs_ioctl.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > Applied to mantic master-next branch. Thanks!