CVEvulnerability

CVE-2019-17075

7.5 HIGH Published 2019-10-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C

Description

An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.

Affected configurations

• linux linux kernel (>= 2.6.35 < 4.4.198) • linux linux kernel (>= 4.5.0 < 4.9.198) • linux linux kernel (>= 4.10 < 4.14.151) • linux linux kernel (>= 4.15 < 4.19.81) • linux linux kernel (>= 4.20 < 5.3.8)

References