[Security] CVE-2022-0847 lib/iov_iter: initialize "flags" in new pipe_buffer

Bug #1964427 reported by quanxian
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
intel
New
Undecided
Unassigned
linux (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

[Feature Description]

CVE-2022-0847

A critical linux kernel vulnerability has been found, which exists since Linux kernel v5.8 or later.
If linux kernel has this commit f6dd975583bd ("pipe: merge anon_pipe_buf*_ops"), please backport this patch: 9d2231c5d74e13b2a0546fee6737ee4446017903(“lib/iov_iter: initialize "flags" in new pipe_buffer”) to fix.
Please note: This commit f6dd975583bd did not introduce the bug, it just made it easier to exploit.
The vulnerability has been fixed in linux kernel 5.16.11, 5.15.25 and 5.10.102.

For more details see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0847

Commit: 9d2231c5d74e13b2a0546fee6737ee4446017903
git tag --contains 9d2231c5d74e13b2a0546fee6737ee4446017903
v5.17-rc6

Commit:f6dd975583bd
git tag --contains f6dd975583bd
v5.10

Target Kernel: 5.17
Target Release: 22.10/22.04/Others

[HW/SW Information]
Bug fix for vulnerability

[Business Justification]
Function improvement

CVE References

summary: - [Secutiry] CVE-2022-0847 lib/iov_iter: initialize "flags" in new
+ [Security] CVE-2022-0847 lib/iov_iter: initialize "flags" in new
pipe_buffer
information type: Public → Public Security
Revision history for this message
Steve Beattie (sbeattie) wrote :
affects: ubuntu → linux (Ubuntu)
Changed in linux (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.