fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
authorAlexander Potapenko <glider@google.com>
Thu, 28 May 2020 05:20:52 +0000 (22:20 -0700)
committerBen Hutchings <benh@debian.org>
Tue, 9 Jun 2020 17:50:00 +0000 (18:50 +0100)
commita3358df5277033e5b38fcfd719cc0b3827c5923f
tree32309c0a7007792a8cb83b27baa952e01e9b6afa
parent384c051c6f590449f546aab0834c3ffd064ec2cf
fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()

Origin: https://git.kernel.org/linus/1d605416fb7175e1adf094251466caa52093b413
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-10732

KMSAN reported uninitialized data being written to disk when dumping
core.  As a result, several kilobytes of kmalloc memory may be written
to the core file and then read by a non-privileged user.

Reported-by: sam <sunhaoyl@outlook.com>
Signed-off-by: Alexander Potapenko <glider@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Acked-by: Kees Cook <keescook@chromium.org>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Alexey Dobriyan <adobriyan@gmail.com>
Cc: <stable@vger.kernel.org>
Link: http://lkml.kernel.org/r/20200419100848.63472-1-glider@google.com
Link: https://github.com/google/kmsan/issues/76
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name fs-binfmt_elf.c-allocate-initialized-memory-in-fill_.patch
fs/binfmt_elf.c