Linux Kernel Information Leak Vulnerability in ACRN Hypervisor PM Command IOCTL

A vulnerability in the Linux kernel's ACRN hypervisor component has been addressed, which could lead to information leakage. The issue arose in the 'pmcmd_ioctl' function, where three memory objects allocated by kmalloc were not properly initialized before being copied to user space. This lack of initialization created a risk of unintentional data exposure, as the uninitialized bytes could contain sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, allowing an attacker to access sensitive data that should not be available.