Threats tagged 'ghsa-77jx-g549-23wh'

A vulnerability in the Linux kernel's qla2xxx SCSI driver allows uninitialized kernel heap memory to be leaked to user space due to improper zeroing of the diagnostics buffer. This occurs because the qla_dport_diag response buffer is allocated without zeroing, and some fields are copied out uninitialized, potentially exposing sensitive kernel memory contents.