NetSight
IP …
medium5.5

CVE-2024-44947

In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuse_notify_store(), unli…

Impact

In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuse_notify_store(), unlike fuse_do_readpage(), does not enable page zeroing (because it can be used to change partial page contents). So fuse_notify_store() must be more careful to fully initialize page contents (including parts of the page that are beyond end-of-file) before marking the page uptodate. The current code can leave beyond-EOF page contents uninitialized, which makes these uninitialized page contents visible to userspace via mmap(). This is an information leak, but only affects systems which do not enable init-on-alloc (via CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y or the corresponding kernel command line parameter).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.36 before 4.19.321
from 4.20 before 5.4.283
from 5.5 before 5.10.225
from 5.11 before 5.15.166
from 5.16 before 6.1.107
from 6.2 before 6.6.48

Weakness classification

CWE-665

References