sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info->pad0 is not initialized.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 9, 2023 |
| Ubuntu | — | Upgrade linux-image-6.5.0-27-genericUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1019-oemUpgrade linux-image-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-6.5.0-1017-awsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1020-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1018-azureUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-raspi-nolpae | Mar 12, 2024 | Dec 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub