CVE Database›Document archive›CVE-2022-49852

CVE-2022-49852

kernel: riscv: process: fix kernel info leakage

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: process: fix kernel info leakage

thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork.

As for kthread case, it's better to clear the s[12] array as well.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified