In the Linux kernel, the following vulnerability has been resolved:
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and issued the following report [1].
[1] "BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x100 lib/usercopy.c:40 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _copy_to_user+0xbc/0x100 lib/usercopy.c:40 copy_to_user include/linux/uaccess.h:191 [inline] do_sys_name_to_handle fs/fhandle.c:73 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x949/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc+0x121/0x3c0 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] do_sys_name_to_handle fs/fhandle.c:39 [inline] __do_sys_name_to_handle_at fs/fhandle.c:112 [inline] __se_sys_name_to_handle_at+0x441/0xb10 fs/fhandle.c:94 __x64_sys_name_to_handle_at+0xe4/0x140 fs/fhandle.c:94 ...
Bytes 18-19 of 20 are uninitialized Memory access of size 20 starts at ffff888128a46380 Data copied to user address 0000000020000240"
Per Chuck Lever's suggestion, use kzalloc() instead of kmalloc() to solve the problem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-cross-headersUpgrade perf | Jun 6, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-5.15.153-100.162Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfoUpgrade python-perf-debuginfo | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade perf-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-devel | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvm | Jun 17, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-symsUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-devel | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.4.0-257-genericUpgrade linux-image-intelUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-227-genericUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1006-oracle-64k | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub