Linux Kernel Hyper-V Vmbus Driver Information Disclosure Vulnerability in Isolated Guests

A vulnerability in the Linux kernel's Hyper-V Vmbus driver could lead to the unintentional disclosure of guest-sensitive information. This issue arises because the 'hv_panic_page' may contain sensitive data from the guest, which is not dumped to Hyper-V by default in isolated guests. The vulnerability has been addressed by deactivating the 'sysctl_record_panic_msg' feature by default in these isolated environments.

Impact

Exploitation of this vulnerability could result in the leakage of sensitive guest information to the Hyper-V host.