An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html | Third Party Advisory |
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7 | Mailing List Release Notes Vendor Advisory |
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0625b4ba1a5d4703c7fb01c497bd6c156908af00 | Mailing List Patch Vendor Advisory |
https://github.com/torvalds/linux/commit/0625b4ba1a5d4703c7fb01c497bd6c156908af00 | Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20190905-0002/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-07-26T04:39:40
Updated: 2019-09-05T23:06:07
Reserved: 2019-07-26T00:00:00
Link: CVE-2018-20855
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-07-26T05:15:10.423
Modified: 2019-11-20T15:31:14.893
Link: CVE-2018-20855
JSON object: View
Redhat Information
No data.
CWE