In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
crypto: atmel-sha204a – fix heap info leak on I2C transfer failure<\/p>\n
The nonblocking RNG path allocates a work_data structure to track the
\nstate of an in-flight asynchronous I2C request. This pointer is stored
\nin rng->priv and later consumed by the read path once the transaction
\ncompletes.<\/p>\n
If the underlying I2C transfer fails, the completion callback is invoked
\nwith a non-zero status. In this case, the allocated work_data is not
\nusable for producing RNG output and must not remain associated with the
\nhwrng state.<\/p>\n
Previously, the failure path only logged a warning but left the pointer
\nstate uncleared, which can result in subsequent read attempts observing
\nstale state and interpreting it as valid completion data.<\/p>\n
Fix this by freeing the pending work_data. The I2C transaction reports
\nan error. This ensures that failed requests do not leave residual state
\nbehind that could be interpreted as valid RNG data on later reads.
\nClearing rng->priv is done at the subsequent call to nonblocking read.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
crypto: atmel-sha204a – fix heap info leak on I2C transfer failure<\/p>\n
The nonblocking RNG path allocates a work_data structure to tra<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-26016","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/26016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}