Tracker / CVE-2020-12464
CVE-2020-12464
Medium 6.7
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
Affected products and versions
| linux | linux_kernel · … → 3.16.85 |
|---|---|
| linux | linux_kernel · 3.17 → 4.4.221 |
| linux | linux_kernel · 4.10 → 4.14.178 |
| linux | linux_kernel · 4.15 → 4.19.119 |
| linux | linux_kernel · 4.20 → 5.4.36 |
| linux | linux_kernel · 4.5 → 4.9.221 |
| linux | linux_kernel · 5.5 → 5.6.8 |
| netapp | active_iq_unified_manager |
| netapp | aff_a700s |
| netapp | cloud_backup |
| netapp | hci_baseboard_management_controller |
| netapp | hci_compute_node |
| netapp | hci_storage_nodes |
| netapp | solidfire_\&_hci_storage_node |
| netapp | solidfire_baseboard_management_controller |
| netapp | steelstore_cloud_integrated_storage |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.