CVE-2017-18550

An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo structure.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2019-08-19

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342ffc26693b528648bdc9377e51e4f2450b4860