CVE-2022-50226

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak<br /> <br /> For some sev ioctl interfaces, input may be passed that is less than or<br /> equal to SEV_FW_BLOB_MAX_SIZE, but larger than the data that PSP<br /> firmware returns. In this case, kmalloc will allocate memory that is the<br /> size of the input rather than the size of the data. Since PSP firmware<br /> doesn&amp;#39;t fully overwrite the buffer, the sev ioctl interfaces with the<br /> issue may return uninitialized slab memory.<br /> <br /> Currently, all of the ioctl interfaces in the ccp driver are safe, but<br /> to prevent future problems, change all ioctl interfaces that allocate<br /> memory with kmalloc to use kzalloc and memset the data buffer to zero<br /> in sev_ioctl_do_platform_status.