A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel. This flaw does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file. References: https://lore.kernel.org/lkml/5kn47peabxjrptkqa6dwtyus35ahf4pcj4qm4pumse33kxqpjw@mec4se5relrc/T/
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 2258356]
This flaw was fixed in the 6.4 kernel rebases for Fedora.