oss-sec mailing list archives
Linux kernel < 4.14.111 drivers/media/dvb-frontends/helene.c kernel address dumps to user space
From: Fuqian Huang <huangfq.daxian () gmail com>
Date: Thu, 18 Apr 2019 21:31:36 +0800
In drivers/media/dvb-frontends/helene.c:1005, function helene_attach_s will print the address of adapter to dmesg, the kernel address is dumpped to user space. struct dvb_frontend *helene_attach_s(struct dvb_frontend *fe, const struct helene_config *config, struct i2c_adapter *i2c) { ... priv->i2c = i2c; ... dev_info(&priv->i2c->dev, "Sony HELENE Sat attached on addr=%x at I2C adapter %p\n", priv->i2c_address, priv->i2c); return fe; } In drivers/media/dvb-frontends/helene.c:1041, function helene_attach will print the address of adapter to dmesg, the kernel address is dumpped to user space. struct dvb_frontend *helene_attach(struct dvb_frontend *fe, const struct helene_config *config, struct i2c_adapter *i2c) { ... priv->i2c = i2c; ... dev_info(&priv->i2c->dev, "Sony HELENE Ter attached on addr=%x at I2C adapter %p\n", priv->i2c_address, priv->i2c); return fe; }
Current thread:
- Linux kernel < 4.14.111 drivers/media/dvb-frontends/helene.c kernel address dumps to user space Fuqian Huang (Apr 18)