|
Message-ID: <CABXRUiQpWVeHYZeN_=P+n8ghVA=VWDPAeddpsZj38P0sZADeNA@mail.gmail.com> Date: Tue, 16 Apr 2019 10:08:10 +0800 From: Fuqian Huang <huangfq.daxian@...il.com> To: oss-security@...ts.openwall.com Subject: kernel address leak in drivers/media/dvb-frontends/ascot2e.c - linux 4.14.111 LTS In ascot2e_attach, dev_info will print the address of adapter to dmesg, sensitive kernel information will be leaked to user space. struct dvb_frontend *ascot2e_attach(struct dvb_frontend *fe, const struct ascot2e_config *config, struct i2c_adapter *i2c) { ... dev_info(&priv->i2c->dev, "Sony ASCOT2E attached on addr=%x at I2C adapter %p\n", priv->i2c_address, priv->i2c); ... }
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.