CVE-2024-43854

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the initialization of the integrity buffer in the Linux kernel. Metadata added by bio integrity prep uses plain kmalloc, which leads to random kernel memory being written to media. For PI metadata, this is limited to the app tag that isn't used by kernel-generated metadata, but for non-PI metadata, the entire buffer leaks kernel memory. The fix involves adding the GFP ZERO flag to allocations for writes.

Recommendations To resolve the issue, update to Linux kernel version 6.6.50 or later. As a temporary workaround, consider restricting access to the vulnerable bio integrity prep function until a patch is available.