An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo structure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-devel | Feb 24, 2020 | Aug 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 19, 2019 |
| Ubuntu | — | Upgrade linux-hwe-edgeUpgrade linux-azureUpgrade linux-hweUpgrade linux-gcp | Nov 19, 2024 | Aug 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub