Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 167 bronnen 1 kritiek 12 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2023-53684

MEDIUM · 5.5 CVSS Gepubliceerd:

Beschrijving

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid
data is copied over. Padding in structures may be filled with
random (possibly sensitve) data and should never be given directly
to user-space.

This patch fixes the copying of xfrm algorithms and the encap
template in xfrm_user so that padding is zeroed.

Vendors

Linux

Affected products

Linux Kernel

References