CVE-2018-20449
Fixed in a distro release EPSS <1%
The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.
Products: linux_kernel, netapp element_software_management_node
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.15.4-1 |
| Debian 13 | linux | 4.15.4-1 |
| Debian 14 | linux | 4.15.4-1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1013.13~16.04.2 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1014.14~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-24.26~16.04.1 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |