An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@50535249f624d0072cd885bcdce4e4b6fb770160",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "net/qrtr/qrtr.c",
"function": "qrtr_recvmsg"
},
"digest": {
"length": 942.0,
"function_hash": "326237298902944552711085178252159586240"
},
"signature_version": "v1",
"id": "CVE-2021-29647-e13f3530"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@50535249f624d0072cd885bcdce4e4b6fb770160",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "net/qrtr/qrtr.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"317345086463415370419056847029360287829",
"85218780793221698087756109282893696768",
"99207985601674004456791158284153340524",
"123088985098890995454573551005234539733"
]
},
"signature_version": "v1",
"id": "CVE-2021-29647-f6ac624d"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-29647.json"