medium5.5
CVE-2018-20449
The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading…
Impact
The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Version 4.14.90 |
| Netapp | Element Software Management Node | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
- https://security.netapp.com/advisory/ntap-20190502-0002/
- https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html
- https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
- https://security.netapp.com/advisory/ntap-20190502-0002/
- https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html