Jason Gunthorpe

2 exploits Active since Jul 2019
CVE-2018-20855 WRITEUP LOW WRITEUP
Linux Kernel < 4.18.7 - Information Disclosure via Uninitialized Stack Memory in mlx5_ib_create_qp_resp
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
CVSS 3.3
CVE-2021-3736 WRITEUP MEDIUM WRITEUP
Linux Kernel < 5.14.20 - Memory Leak in VFIO Mediated Device mbochs_ioctl
A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.
CVSS 5.5