Information Leak in Linux Kernel's Triggered Buffer Management

CVE-2024-57911

Summary

A vulnerability exists in the Linux kernel's triggered buffer management that allows an information leak through uninitialized memory. The issue arises from the allocation of the 'data' array using kmalloc() without setting values for inactive channels. This oversight can result in exposing uninitialized data to user space, potentially compromising system security. The recommended fix is to utilize kzalloc for memory allocation, ensuring that the allocated memory is zeroed and does not expose sensitive information.

References