Skip to content
This repository was archived by the owner on Oct 31, 2024. It is now read-only.

Commit adb1f31

Browse files
name2965gregkh
authored andcommittedOct 22, 2024
vt: prevent kernel-infoleak in con_font_get()
commit f956052 upstream. font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system. Cc: stable@vger.kernel.org Reported-by: syzbot+955da2d57931604ee691@syzkaller.appspotmail.com Fixes: 05e2600 ("VT: Bump font size limitation to 64x128 pixels") Signed-off-by: Jeongjun Park <aha310510@gmail.com> Link: https://lore.kernel.org/r/20241010174619.59662-1-aha310510@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 0fce251 commit adb1f31

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed
 

‎drivers/tty/vt/vt.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -4726,7 +4726,7 @@ static int con_font_get(struct vc_data *vc, struct console_font_op *op)
47264726
return -EINVAL;
47274727

47284728
if (op->data) {
4729-
font.data = kvmalloc(max_font_size, GFP_KERNEL);
4729+
font.data = kvzalloc(max_font_size, GFP_KERNEL);
47304730
if (!font.data)
47314731
return -ENOMEM;
47324732
} else

0 commit comments

Comments
 (0)
This repository has been archived.