sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info->pad0 is not initialized.

...

Linux sec_attest_info() Heap Buffer Overflow Info Disclosure

The vulnerability of the secattestinfo function drivers/accel/habanalabs/common/habanalabsioctl.c in the Linux kernel is related to insufficient protection of service data when processing the Pad0 field. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

UBUNTU-CVE-2023-50431

secattestinfo in drivers/accel/habanalabs/common/habanalabsioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info-pad0 is not initialized...

PT-2023-7578

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.6.5 Description The issue is related to the sec attest info function in the Linux kernel, which allows an information leak to user space because info-pad0 is not initialized. This can potentially allow an attack...