CVE-2020-29371

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.4

Description An issue was discovered in the romfs dev read function in fs/romfs/storage.c that is related to insufficient input validation, allowing an attacker to gain unauthorized access to protected information. This issue results in uninitialized memory leaks to userspace.

Recommendations For Linux kernel versions prior to 5.8.4, update to version 5.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the romfs dev read function in fs/romfs/storage.c until a patch is available.