CVE-2018-20855: Buffer Overflow
An issue was discovered in the Linux kernel before 4.18.7. In createqpcommon in drivers/infiniband/hw/mlx5/qp.c, mlx5ibcreateqpresp was never initialized, resulting in a leak of stack memory to userspace.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-20855?
CVE-2018-20855 is a vulnerability in the Linux kernel before version 4.18.7 that could lead to a leak of stack memory to userspace.
How does CVE-2018-20855 affect Linux?
CVE-2018-20855 affects Linux versions before 4.18.7, potentially exposing sensitive stack memory to userspace.
What is the severity of CVE-2018-20855?
The severity of CVE-2018-20855 is low with a CVSS score of 3.3.
How can I fix CVE-2018-20855?
To fix CVE-2018-20855, update your Linux kernel to version 4.18.7 or later.
Where can I find more information about CVE-2018-20855?
You can find more information about CVE-2018-20855 at the following references: [link1](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html), [link2](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html), [link3](https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7).