Kangjie Lu

The issue is related to the function `rcar drif g fmt sdr cap` in the Linux kernel, specifically in the file `drivers/media/platform/rcar drif.c`. It is caused by the uninitialized variable `f->fmt.sdr.reserved`, which could lead to a memory disclosure problem. This could potentially allow an attacker to gain unauthorized access to protected information.

The issue is related to the `tipc nl compat link dump` function in `net/tipc/netlink compat.c`, which does not properly copy a certain string. This allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

The issue is related to the `rds inc info copy` function in the Linux kernel, which does not properly initialize a certain structure member. This allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

The issue concerns the rtnl fill link ifmap function in the Linux kernel, which fails to initialize a certain data structure. This allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

The issue is related to the x25 negotiate facilities function in the Linux kernel, which does not properly initialize a certain data structure. This allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.

The issue is related to the snd timer user params function in the sound/core/timer.c file of the Linux kernel. This function does not properly initialize a certain data structure, allowing local users to obtain sensitive information from kernel stack memory. This can be achieved through crafted use of the ALSA timer interface.

The issue concerns the proc connectinfo function in the Linux kernel, which fails to initialize a certain data structure. This allows local users to obtain sensitive information from kernel stack memory by making a crafted USBDEVFS CONNECTINFO ioctl call.

The issue is related to the `llc cmsg rcv` function in the Linux kernel, which fails to initialize a certain data structure. This allows attackers to obtain sensitive information from kernel stack memory by reading a message.

The issue concerns the Telephony subsystem, which does not enforce API conformity for access to telephony-daemon interfaces. This allows attackers to bypass intended restrictions on phone calls by using a crafted app that sends direct requests to the daemon.