Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 16 Apr 2019 10:08:10 +0800
From: Fuqian Huang <huangfq.daxian@...il.com>
To: oss-security@...ts.openwall.com
Subject: kernel address leak in drivers/media/dvb-frontends/ascot2e.c - linux
 4.14.111 LTS

In ascot2e_attach, dev_info will print the address of adapter to
dmesg, sensitive kernel information will be leaked to user space.
struct dvb_frontend *ascot2e_attach(struct dvb_frontend *fe,
  const struct ascot2e_config *config,
  struct i2c_adapter *i2c)
{
  ...
  dev_info(&priv->i2c->dev,
  "Sony ASCOT2E attached on addr=%x at I2C adapter %p\n",
  priv->i2c_address, priv->i2c);
  ...
}

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.