The passthrough structure is declared off of the stack, so it needs to be zeroed out before copied back to userspace to prevent any unintentional data leakage. Reported-by: hdthky <hdthky0@xxxxxxxxx> Cc: stable <stable@xxxxxxxxxx> Cc: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxx> Cc: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx> Reviewed-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/scsi/stex.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/scsi/stex.c b/drivers/scsi/stex.c index e6420f2127ce..fc5880a35723 100644 --- a/drivers/scsi/stex.c +++ b/drivers/scsi/stex.c @@ -668,6 +668,7 @@ static int stex_queuecommand_lck(struct scsi_cmnd *cmd) struct st_drvver ver; size_t cp_len = sizeof(ver); + memset(&ver, 0x00, sizeof(ver)); ver.major = ST_VER_MAJOR; ver.minor = ST_VER_MINOR; ver.oem = ST_OEM; -- 2.37.3
