Linux Kernel Panthor DRM Garbage Value Vulnerability in Device Query IOCTL

A vulnerability in the Linux kernel's Panthor Direct Rendering Manager (DRM) module has been addressed. The issue arose in the 'panthor_ioctl_dev_query()' function, where the 'priorities_info' variable was uninitialized. This uninitialized value was inadvertently copied to a user object during the execution of 'PANTHOR_UOBJ_SET()', leading to the potential exposure of garbage values. The vulnerability has been resolved by initializing 'priorities_info' with memset to eliminate the issue of uninitialized data.

Impact

The vulnerability could have allowed user-space applications to receive uninitialized, and potentially sensitive, data from the kernel, leading to undefined behavior or exploitation opportunities.