linux/drivers/accel
Xingyuan Mo db43f2eabd accel/habanalabs: fix information leak in sec_attest_info()
[ Upstream commit a9f07790a4 ]

This function may copy the pad0 field of struct hl_info_sec_attest to user
mode which has not been initialized, resulting in leakage of kernel heap
data to user mode. To prevent this, use kzalloc() to allocate and zero out
the buffer, which can also eliminate other uninitialized holes, if any.

Fixes: 0c88760f8f ("habanalabs/gaudi2: add secured attestation info uapi")
Signed-off-by: Xingyuan Mo <hdthky0@gmail.com>
Reviewed-by: Oded Gabbay <ogabbay@kernel.org>
Signed-off-by: Oded Gabbay <ogabbay@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2024-01-25 15:45:06 -08:00
..
habanalabs accel/habanalabs: fix information leak in sec_attest_info() 2024-01-25 15:45:06 -08:00
ivpu accel/ivpu/37xx: Fix interrupt_clear_with_0 WA initialization 2023-12-11 10:38:52 +01:00
qaic accel/qaic: Implement quirk for SOC_HW_VERSION 2023-12-15 10:40:37 -07:00
drm_accel.c accel: make accel_class a static const structure 2023-10-09 12:37:19 +03:00
Kconfig accel/qaic: Add qaic driver to the build system 2023-04-06 08:23:03 +02:00
Makefile accel/qaic: Add qaic driver to the build system 2023-04-06 08:23:03 +02:00