CVE-2018-20855

LOW EPSS 36.7%
Published Jul 26, 20196y ago · Modified Jun 17, 20262w ago
3.3 CVSS 3.1
Low
Find Similar
Published Jul 26, 2019 6y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
36.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel* <4.18.7
opensuseleap15.0any
opensuseleap15.1any
netappactive_iq_performance_analytics_services*any
netappactive_iq_unified_manager*≥9.5
netappdata_availability_services*any
netappelement_software*any

References 6

  • lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html
    Third Party Advisory
  • lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html
    Third Party Advisory
  • cdn.kernel.org https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7
    Mailing ListRelease NotesVendor Advisory
  • git.kernel.org https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0625b4ba1a5d4703c7fb01c497bd6c156908af00
    Mailing ListPatchVendor Advisory
  • github.com https://github.com/torvalds/linux/commit/0625b4ba1a5d4703c7fb01c497bd6c156908af00
    PatchThird Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20190905-0002/
    Third Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0625b4ba1a5d4703c7fb01c497bd6c156908af00
    Mailing ListPatchVendor Advisory
  • github.com https://github.com/torvalds/linux/commit/0625b4ba1a5d4703c7fb01c497bd6c156908af00
    PatchThird Party Advisory