In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.5 | Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | >= 7.5.0, < 7.5.2 |
| Linux | Linux | < b5dd513daa70ee8f6d281a20bd28485ee9bb7db2 |