In the Linux kernel, the following vulnerability has been resolved:
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and issued the following report [1].
[1] "BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x100 lib/usercopy.c:40 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _copy_to_user+0xbc/0x100 lib/usercopy.c:40 copy_to_user include/linux/uaccess.h:191 [inline] do_sys_name_to_handle fs/fhandle.c:73 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x949/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc+0x121/0x3c0 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] do_sys_name_to_handle fs/fhandle.c:39 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x441/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Bytes 18-19 of 20 are uninitialized Memory access of size 20 starts at ffff888128a46380 Data copied to user address 0000000020000240"
Per Chuck Lever's suggestion, use kzalloc() instead of kmalloc() to solve the problem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade perfUpgrade python3-perf | Jun 6, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.153-100.162Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-tools-develUpgrade kernel | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headers | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 6, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libs-devel | Jun 17, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade reiserfs-kmp-default | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-227-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oracle-lts-18.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub