CVE-2023-50431

CVE-2023-50431

Medium · published December 10, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info->pad0 is not initialized.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Published
2023-12-10T04:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.6.146.6.14
References (4)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a9f07790a4b2250f0140e9a61c7f842fd9b618c7 · [email protected]https://lists.freedesktop.org/archives/dri-devel/2023-November/431772.html · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a9f07790a4b2250f0140e9a61c7f842fd9b618c7 · af854a3a-2127-422b-91ae-364da2661108https://lists.freedesktop.org/archives/dri-devel/2023-November/431772.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 DEC 00:00Z
    sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because…
    cvelistv5