NetSight
IP …
high7.1

CVE-2022-49852

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage thread_struct's s[12] may contain random kernel mem…

Impact

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork. As for kthread case, it's better to clear the s[12] array as well.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 4.19.267
from 4.20 before 5.4.225
from 5.5 before 5.10.155
from 5.11 before 5.15.79
from 5.16 before 6.0.9
Version 6.1

References