CVE-2022-49852

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49852
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49852.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49852
Downstream
Published
2025-05-01T15:16:08Z
Modified
2025-08-09T19:01:29Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

riscv: process: fix kernel info leakage

threadstruct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in threadstruct when fork.

As for kthread case, it's better to clear the s[12] array as well.

References

Affected packages