High · published September 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
um: line: always fill *error_out in setup_one_line()
The pointer isn't initialized by callers, but I have
encountered cases where it's still printed; initialize
it in all possible cases in setup_one_line().
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.322 | 4.19.322 |
| linux/linux_kernel | ≥ 4.20, < 5.4.284 | 5.4.284 |
| linux/linux_kernel | ≥ 5.5, < 5.10.226 | 5.10.226 |
| linux/linux_kernel | ≥ 5.11, < 5.15.167 | 5.15.167 |
| linux/linux_kernel | ≥ 5.16, < 6.1.110 | 6.1.110 |
| linux/linux_kernel | ≥ 6.2, < 6.6.51 | 6.6.51 |
| linux/linux_kernel | ≥ 6.7, < 6.10.10 | 6.10.10 |