← Database

CVE-2022-49852

HIGH CVSS: 7.1 Published: 2025-05-01 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork. As for kthread case, it's better to clear the s[12] array as well.

Affected Platforms

Linux Linux Kernel

Weakness Type

NVD-CWE-noinfo

References