NetSight
IP …
high7.5

CVE-2019-17075

An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2.

Impact

An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.35 before 4.4.198
from 4.5.0 before 4.9.198
from 4.10 before 4.14.151
from 4.15 before 4.19.81
from 4.20 before 5.3.8

References