Bug 2356597 (CVE-2025-21950) - CVE-2025-21950 kernel: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
Summary: CVE-2025-21950 kernel: drivers: virt: acrn: hsm: Use kzalloc to avoid info le...
Keywords:
Status: NEW
Alias: CVE-2025-21950
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-01 16:01 UTC by OSIDB Bzimport
Modified: 2025-04-02 10:36 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-01 16:01:43 UTC
In the Linux kernel, the following vulnerability has been resolved:

drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl

In the "pmcmd_ioctl" function, three memory objects allocated by
kmalloc are initialized by "hcall_get_cpu_state", which are then
copied to user space. The initializer is indeed implemented in
"acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of
information leakage due to uninitialized bytes.


Note You need to log in before you can comment on or make changes to this bug.