What’s Vulnerable › Vulnerabilities

CVE-2018-20449

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-04 · updated 2026-06-17
• Weakness: CWE-200

Description

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Affected products

• Linux kernel: 4.14.90
• NetApp Element Software Management Node: all versions

References

• https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
• https://security.netapp.com/advisory/ntap-20190502-0002/
• https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html
• https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
• https://security.netapp.com/advisory/ntap-20190502-0002/
• https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html

Get alerted when CVE-2018-20449 or the next vulnerability affects your stack