Date: Tue, 30 Jun 2026 17:20:41 +0000 From: Mark Johnston <markj@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Cc: Ed Maste <emaste@FreeBSD.org> Subject: git: 6d0438693721 - releng/14.3 - compat/linux: Avoid waitid() kernel stack disclosure Message-ID: <6a43fae9.45c3c.25e75b01@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch releng/14.3 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=6d0438693721739ae704c4463133c8c6d4a9ea2c commit 6d0438693721739ae704c4463133c8c6d4a9ea2c Author: Ed Maste <emaste@FreeBSD.org> AuthorDate: 2026-03-10 13:53:46 +0000 Commit: Mark Johnston <markj@FreeBSD.org> CommitDate: 2026-06-30 02:32:02 +0000 compat/linux: Avoid waitid() kernel stack disclosure Approved by: so Security: FreeBSD-SA-26:47.linux Security: CVE-2026-49424 Reported by: Adam Crosser, Praetorian Reviewed by: philip Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55812 (cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd) (cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9) (cherry picked from commit a347e6e20e75ad6224afefcf650ef738c3de094d) --- sys/compat/linux/linux_misc.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/compat/linux/linux_misc.c b/sys/compat/linux/linux_misc.c index 41977e5a899c..be47c15121a2 100644 --- a/sys/compat/linux/linux_misc.c +++ b/sys/compat/linux/linux_misc.c @@ -748,6 +748,7 @@ linux_common_wait(struct thread *td, idtype_t idtype, int id, int *statusp, error = linux_copyout_rusage(&wru.wru_self, rup); if (error == 0 && infop != NULL && td->td_retval[0] != 0) { sig = bsd_to_linux_signal(siginfo.si_signo); + memset(&lsi, 0, sizeof(lsi)); siginfo_to_lsiginfo(&siginfo, &lsi, sig); error = copyout(&lsi, infop, sizeof(lsi)); }home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a43fae9.45c3c.25e75b01>