CVE-2022-49852

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A security issue has been identified in the Linux kernel, specifically related to the riscv process, where the s[12] array in thread struct may contain random kernel memory content. This content could potentially leak to userspace, posing a security risk. The issue is resolved by clearing the s[12] array in thread struct when forking. Additionally, for the kthread case, it is recommended to clear the s[12] array as well.

Recommendations To resolve the issue, clear the s[12] array in thread struct when forking. As for the kthread case, clear the s[12] array as well to ensure security.