diff options
| author | Haoyu Li <[email protected]> | 2025-01-30 11:58:11 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2025-02-20 14:20:34 +0000 |
| commit | 819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bb (patch) | |
| tree | fe80b8d043b81365f7bb81e693423ccf3c963805 /tools/testing/selftests/kvm/x86/nested_exceptions_test.c | |
| parent | binderfs: fix use-after-free in binder_devices (diff) | |
| download | kernel-819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bb.tar.gz kernel-819cec1dc47cdeac8f5dd6ba81c1dbee2a68c3bb.zip | |
drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
In the "pmcmd_ioctl" function, three memory objects allocated by
kmalloc are initialized by "hcall_get_cpu_state", which are then
copied to user space. The initializer is indeed implemented in
"acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of
information leakage due to uninitialized bytes.
Fixes: 3d679d5aec64 ("virt: acrn: Introduce interfaces to query C-states and P-states allowed by hypervisor")
Signed-off-by: Haoyu Li <[email protected]>
Cc: stable <[email protected]>
Acked-by: Fei Li <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'tools/testing/selftests/kvm/x86/nested_exceptions_test.c')
0 files changed, 0 insertions, 0 deletions