CVE-2017-18549: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_send_raw_srb does not initialize the reply structure.

Affected products

• Linux Linux Kernel: before 4.13 (fixed in 4.13)

Published 2019-08-19. Last modified 2026-06-17.