In the Linux kernel, the following vulnerability has been resolved:
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and issued the following report [1].
[1] "BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x100 lib/usercopy.c:40 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _copy_to_user+0xbc/0x100 lib/usercopy.c:40 copy_to_user include/linux/uaccess.h:191 [inline] do_sys_name_to_handle fs/fhandle.c:73 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x949/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc+0x121/0x3c0 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] do_sys_name_to_handle fs/fhandle.c:39 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x441/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Bytes 18-19 of 20 are uninitialized Memory access of size 20 starts at ffff888128a46380 Data copied to user address 0000000020000240"
Per Chuck Lever's suggestion, use kzalloc() instead of kmalloc() to solve the problem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvm | Jun 6, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.10.214-202.855Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfo | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headers | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 6, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-kvm | Jun 17, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-debugUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-default-manUpgrade gfs2-kmp-64kb | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1172-awsUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.4.0-1134-awsUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub