git: 6d0438693721 - releng/14.3 - compat/linux: Avoid waitid() kernel stack disclosure

The branch releng/14.3 has been updated by markj:

URL: https://cgit.FreeBSD.org/src/commit/?id=6d0438693721739ae704c4463133c8c6d4a9ea2c

commit 6d0438693721739ae704c4463133c8c6d4a9ea2c
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-03-10 13:53:46 +0000
Commit:     Mark Johnston <markj@FreeBSD.org>
CommitDate: 2026-06-30 02:32:02 +0000

    compat/linux: Avoid waitid() kernel stack disclosure
    
    Approved by:    so
    Security:       FreeBSD-SA-26:47.linux
    Security:       CVE-2026-49424
    Reported by:    Adam Crosser, Praetorian
    Reviewed by:    philip
    Sponsored by:   The FreeBSD Foundation
    Differential Revision: https://reviews.freebsd.org/D55812
    
    (cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd)
    (cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9)
    (cherry picked from commit a347e6e20e75ad6224afefcf650ef738c3de094d)
---
 sys/compat/linux/linux_misc.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sys/compat/linux/linux_misc.c b/sys/compat/linux/linux_misc.c
index 41977e5a899c..be47c15121a2 100644
--- a/sys/compat/linux/linux_misc.c
+++ b/sys/compat/linux/linux_misc.c
@@ -748,6 +748,7 @@ linux_common_wait(struct thread *td, idtype_t idtype, int id, int *statusp,
 		error = linux_copyout_rusage(&wru.wru_self, rup);
 	if (error == 0 && infop != NULL && td->td_retval[0] != 0) {
 		sig = bsd_to_linux_signal(siginfo.si_signo);
+		memset(&lsi, 0, sizeof(lsi));
 		siginfo_to_lsiginfo(&siginfo, &lsi, sig);
 		error = copyout(&lsi, infop, sizeof(lsi));
 	}