CVE-2022-49852

riscv: process: fix kernel info leakage

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

riscv: process: fix kernel info leakage

thread_struct's s[12] may contain random kernel memory content, which

may be finally leaked to userspace. This is a security hole. Fix it

by clearing the s[12] array in thread_struct when fork.

As for kthread case, it's better to clear the s[12] array as well.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Published
2025-05-01T14:10Z
EPSS history
Timeline
  • 01 MAY 14:10Z
    riscv: process: fix kernel info leakage
    cvelistv5