drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
5 Medium
AI Score
Confidence
0.0004 Low
EPSS
Percentile
5.2%