oss-security - Linux kernel < 4.14.111 drivers/media/pci/saa7164/saa7164-core.c kernel address dumps to user space

Date: Thu, 18 Apr 2019 21:32:10 +0800
From: Fuqian Huang <huangfq.daxian@...il.com>
To: oss-security@...ts.openwall.com
Subject: Linux kernel < 4.14.111 drivers/media/pci/saa7164/saa7164-core.c
 kernel address dumps to user space

In drivers/media/pci/saa7164/saa7164-core.c:1059,
saa7164_proc_show will dump the address of dev into procfs,
local user could read kernel address information via /proc/saa7164.

static int saa7164_proc_show(struct seq_file *m, void *v)
{
    ...
        seq_printf(m, "%s = %p\n", dev->name, dev);
    ...
}

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.