CVE-2019-16921

In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might…

published September 27, 2019

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01935 · 79.9th percentile
Published
2019-09-27T12:07Z
EPSS history
Timeline
  • 27 SEP 12:07Z
    In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might…
    cvelistv5