REDHAT-BUG-1335817: Low severity red hat enterprise linux vulnerability
In sgio, blkrqmapuser{,iov} may allocate a set of bounce buffer pages to do the bio, if it finds the user buffer cannot be directly mapped. But the allocated pages are not cleared.
If the bounce buffer is also not written to by device, garbage data is left, and copied back to user in blkrqunmapuser.
The allocated pages should be cleared. This also eliminates the risk of leaking sensitive information to userspace, which may have a security impact.
This flaw is specific to RHEL-7 and does not affect the current upstream kernel.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1335817?
The severity of REDHAT-BUG-1335817 is considered medium due to the potential exposure of sensitive data.
How do I fix REDHAT-BUG-1335817?
To fix REDHAT-BUG-1335817, ensure that the affected software is updated to include the latest patches provided by Red Hat.
What is the impact of REDHAT-BUG-1335817?
The impact of REDHAT-BUG-1335817 involves the risk of exposing garbage data back to the user from the uninitialized memory of the bounce buffer.
Which versions of Red Hat are affected by REDHAT-BUG-1335817?
REDHAT-BUG-1335817 affects various versions of Red Hat Enterprise Linux that utilize the sg_io interface.
Is there a workaround for REDHAT-BUG-1335817?
Currently, there are no documented workarounds for REDHAT-BUG-1335817 other than applying the necessary updates.