CVE-2017-10911: Exposure of Sensitive Information to an Unauthorized Actor

The makeresponse function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS or other guest OS kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structure...

PT-2017-11603

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.8 Description The issue allows guest OS users to obtain sensitive information from host OS or other guest OS kernel memory. This is achieved by leveraging the copying of uninitialized padding fields in Xen...