1 matches found
Session fixation
In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...
5CVSS7AI score0.01989EPSS
SaveExploits0References2Affected Software1
20