![]() commit 819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bb upstream.
In the "pmcmd_ioctl" function, three memory objects allocated by
kmalloc are initialized by "hcall_get_cpu_state", which are then
copied to user space. The initializer is indeed implemented in
"acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of
information leakage due to uninitialized bytes.
Fixes:
|
||
---|---|---|
.. | ||
acrn | ||
coco | ||
nitro_enclaves | ||
vboxguest | ||
fsl_hypervisor.c | ||
Kconfig | ||
Makefile | ||
vmgenid.c |