摘要:
In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in bio_truncate()
bio_truncate() clears the buffer outside of last block of bdev, however
current bio_truncate() is using the wrong offset of page. So it can
return the uninitialized data.
This happened when both of truncated/corrupted FS and userspace (via
bdev) are trying to read the last of bdev.
安全等级: Low
公告ID: KylinSec-SA-2024-2883
发布日期: 2024年6月26日
关联CVE: CVE-2022-48747
In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in bio_truncate()
bio_truncate() clears the buffer outside of last block of bdev, however
current bio_truncate() is using the wrong offset of page. So it can
return the uninitialized data.
This happened when both of truncated/corrupted FS and userspace (via
bdev) are trying to read the last of bdev.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-48747 | KY3.4-5 | kernel | Unaffected |
| CVE-2022-48747 | KY3.5.3 | kernel | Unaffected |
| CVE-2022-48747 | V6 | kernel | Unaffected |
