Linux Kernel IOMMU VFIO Information Structure Initialization Vulnerability

A vulnerability in the Linux kernel's IOMMU subsystem can lead to improper handling of user-space data. Specifically, the issue arises in the VFIO compatibility layer of the IOMMU driver, where the 'vfio_iommu_type1_info' structure is not properly initialized before being copied to user space. This oversight can cause a mismatch in the expected size of the data, leaving certain bytes uninitialized and potentially exploitable. The vulnerability affects Linux kernel versions 6.1 and later.

Impact

The vulnerability could be exploited to read uninitialized memory, leading to information disclosure.