CVE-2018-20449

Name of the Vulnerable Software and Affected Versions: Linux kernel version 4.14.90

Description: The issue concerns the hidma chan stats function in the Linux kernel, which allows local users to obtain sensitive address information. This is achieved by reading callback= lines in a debugfs file.

Recommendations: For Linux kernel version 4.14.90, consider restricting access to the debugfs file to minimize the risk of exploitation. As a temporary workaround, limiting the readability of the callback= lines may help mitigate the issue until a patch is available.