CVE-2018-20855
Fixed in a distro release EPSS <1%
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
Products: linux_kernel, opensuse leap, netapp active_iq_performance_analytics_services, netapp active_iq_unified_manager, netapp data_availability_services, netapp element_software
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.18.8-1 |
| Debian 13 | linux | 4.18.8-1 |
| Debian 14 | linux | 4.18.8-1 |
| SUSE Enterprise Storage 4 | kernel-default | 4.4.121-92.120.1 |
| SUSE Enterprise Storage 4 | kernel-source | 4.4.121-92.120.1 |
| SUSE Enterprise Storage 4 | kernel-syms | 4.4.121-92.120.1 |
| SUSE Enterprise Storage 4 | kgraft-patch-SLE12-SP2_Update_32 | 1-3.3.1 |
| SUSE Enterprise Storage 5 | kernel-default | 4.4.180-94.103.1 |
| SUSE Enterprise Storage 5 | kernel-source | 4.4.180-94.103.1 |
| SUSE Enterprise Storage 5 | kernel-syms | 4.4.180-94.103.1 |
| SUSE Enterprise Storage 5 | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE HPE Helion OpenStack 8 | kernel-default | 4.4.180-94.103.1 |
| SUSE HPE Helion OpenStack 8 | kernel-source | 4.4.180-94.103.1 |
| SUSE HPE Helion OpenStack 8 | kernel-syms | 4.4.180-94.103.1 |
| SUSE HPE Helion OpenStack 8 | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-default | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-syms | 4.12.14-95.29.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | kernel-default | 4.4.121-92.120.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | kernel-default | 4.4.180-94.103.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.29.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-150.32.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | kernel-default | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_7 | 1-6.5.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_13 | 1-1.5.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-default | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_4 | 1-3.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-default | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-zfcpdump | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-default | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-zfcpdump | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-docs | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-obs-build | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-syms | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-vanilla | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-docs | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-obs-build | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-syms | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Legacy 15 | kernel-default | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | kernel-default | 4.12.14-197.15.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-azure | 4.12.14-5.38.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-source-azure | 4.12.14-5.38.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-syms-azure | 4.12.14-5.38.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-azure | 4.12.14-8.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-source-azure | 4.12.14-8.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-syms-azure | 4.12.14-8.13.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-rt | 4.12.14-8.3.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-rt_debug | 4.12.14-8.3.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-source-rt | 4.12.14-8.3.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-syms-rt | 4.12.14-8.3.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-bigmem | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-default | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-ec2 | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-pae | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-ppc64 | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-syms | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-trace | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-xen | 3.0.101-108.101.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | kernel-default | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | kernel-source | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | kernel-syms | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | kernel-xen | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | kgraft-patch-SLE12-SP1_Update_36 | 1-2.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-default | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-syms | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-default | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-source | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-syms | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kgraft-patch-SLE12-SP2_Update_32 | 1-3.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-default | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-syms | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-default | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-syms | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-default | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-source | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-syms | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-xen | 3.12.74-60.64.121.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kgraft-patch-SLE12-SP1_Update_36 | 1-2.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-default | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-source | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-syms | 4.4.121-92.120.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kgraft-patch-SLE12-SP2_Update_32 | 1-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-default | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-syms | 4.4.180-94.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.29.1 |
| SUSE Linux Enterprise Workstation Extension 15 | kernel-default | 4.12.14-150.32.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | kernel-default | 4.12.14-197.15.1 |
| SUSE OpenStack Cloud 7 | kernel-default | 4.4.121-92.120.1 |
| SUSE OpenStack Cloud 7 | kernel-source | 4.4.121-92.120.1 |
| SUSE OpenStack Cloud 7 | kernel-syms | 4.4.121-92.120.1 |
| SUSE OpenStack Cloud 7 | kgraft-patch-SLE12-SP2_Update_32 | 1-3.3.1 |
| SUSE OpenStack Cloud 8 | kernel-default | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud 8 | kernel-source | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud 8 | kernel-syms | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud 8 | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-default | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-source | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-syms | 4.4.180-94.103.1 |
| SUSE OpenStack Cloud Crowbar 8 | kgraft-patch-SLE12-SP3_Update_28 | 1-4.3.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt_debug | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-source-rt | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-syms-rt | 4.12.14-14.8.1 |
| openSUSE Leap 15.0 | kernel-debug | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-default | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-docs | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-kvmsmall | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-obs-build | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-obs-qa | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-source | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-syms | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.0 | kernel-vanilla | 4.12.14-lp150.12.70.1 |
| openSUSE Leap 15.1 | kernel-debug | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-default | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-docs | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-kvmsmall | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-obs-build | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-obs-qa | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-source | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-syms | 4.12.14-lp151.28.13.1 |
| openSUSE Leap 15.1 | kernel-vanilla | 4.12.14-lp151.28.13.1 |