NetSight
IP …
high7.1

CVE-2025-21950

In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl In the "pmcmd_ioctl…

Impact

In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl In the "pmcmd_ioctl" function, three memory objects allocated by kmalloc are initialized by "hcall_get_cpu_state", which are then copied to user space. The initializer is indeed implemented in "acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of information leakage due to uninitialized bytes.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.12 before 5.15.179
from 5.16 before 6.1.131
from 6.2 before 6.6.83
from 6.7 before 6.12.19
from 6.13 before 6.13.7
Version 6.14
DebianDebian Linux
Version 11.0

References