CVE-2024-43854

block: initialize integrity buffer to zero before writing it to media

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

block: initialize integrity buffer to zero before writing it to media

Metadata added by bio_integrity_prep is using plain kmalloc, which leads

to random kernel memory being written media. For PI metadata this is

limited to the app tag that isn't used by kernel generated metadata,

but for non-PI metadata the entire buffer leaks kernel memory.

Fix this by adding the __GFP_ZERO flag to allocations for writes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2024-08-17T09:22Z
EPSS history
Timeline
  • 17 AUG 09:22Z
    block: initialize integrity buffer to zero before writing it to media
    cvelistv5