In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaserusb/kvaserusb_leaf.c driver, aka CID-da2311a6385c.
{ "urgency": "not yet assigned" }