Debian/linux: medium 5.5
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
Action: Upgrade linux to 6.0.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.2-1 | - |
Fixed versions
| 6.0.2-1 |
Sources
published · modified · JSON