CVE-2020-12464
Vulnerability Summary
Timeline
Description
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVSS Metrics
- v3.1•MEDIUM•Score: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS Trends
Current EPSS score: 0.80%• Percentile: 55%
Techniques & Countermeasures
- CWE-416•Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Affected Systems
- debian•linux
< 5.6.14-1 | < 5.6.14-1 | < 5.6.14-1 | < 5.6.14-1
- ubuntu•linux
all | < 4.4.0-184.214 | < 4.15.0-106.107 | < 5.4.0-37.41
- ubuntu•linux-aws
< 4.4.0-1073.77 | < 4.4.0-1109.120 | < 4.15.0-1073.77 | < 5.4.0-1015.15
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.3
< 5.3.0-1023.25~18.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2018.18 | all
- ubuntu•linux-aws-hwe
< 4.15.0-1073.77~16.04.1
- ubuntu•linux-azure
< 4.15.0-1089.99~14.04.1 | < 4.15.0-1089.99~16.04.1 | all | < 5.4.0-1016.16
- ubuntu•linux-azure-4.15
< 4.15.0-1089.99
- ubuntu•linux-azure-5.3
< 5.3.0-1028.29~18.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fips
< 4.15.0-2006.7 | all
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.4.0-1041.46 | all | < 4.15.0-1034.39
- ubuntu•linux-gcp
< 4.15.0-1077.87~16.04.1 | all | < 5.4.0-1015.15
- ubuntu•linux-gcp-4.15
< 4.15.0-1077.87
- ubuntu•linux-gcp-5.3
< 5.3.0-1026.28~18.04.1
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
all
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
< 4.15.0-1063.66
- ubuntu•linux-gke-5.0
< 5.0.0-1042.43
- ubuntu•linux-gke-5.3
< 5.3.0-1026.28~18.04.1
- ubuntu•linux-hwe
< 4.15.0-106.107~16.04.1 | < 5.3.0-59.53~18.04.1
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1075.82 | < 4.15.0-1067.68 | < 5.4.0-1015.15
- ubuntu•linux-lts-xenial
< 4.4.0-184.214~14.04.1
- ubuntu•linux-oem
< 4.15.0-1087.97
- ubuntu•linux-oem-5.6
< 5.6.0-1010.10
- ubuntu•linux-oem-osp1
< 5.0.0-1059.64
- ubuntu•linux-oracle
< 4.15.0-1045.49~16.04.1 | < 4.15.0-1045.49 | < 5.4.0-1015.15
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.3
< 5.3.0-1024.26~18.04.1
- ubuntu•linux-raspi
< 5.4.0-1012.12
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1134.143 | < 4.15.0-1063.67 | all
- ubuntu•linux-raspi2-5.3
< 5.3.0-1027.29~18.04.1
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
< 5.4.0-27.31 | all
- ubuntu•linux-snapdragon
< 4.4.0-1138.146 | < 4.15.0-1080.87
- linux•linux_kernel
< 3.16.85 | ≥ 3.17, < 4.4.221 | ≥ 4.5, < 4.9.221 | ≥ 4.10, < 4.14.178 | ≥ 4.15, < 4.19.119 | ≥ 4.20, < 5.4.36 | ≥ 5.5, < 5.6.8
- netapp•active_iq_unified_manager
na
- netapp•aff_a700s_firmware
na
- netapp•cloud_backup
na
- netapp•hci_baseboard_management_controller
h300s | h410c | h410s | h500s | h610c | h610s | h615c | h700s
- netapp•hci_compute_node
na
- netapp•hci_storage_nodes
na
- netapp•solidfire_\&_hci_storage_node
na
Showing first 50 affected entries in server-rendered view.
References (26)
- https://patchwork.kernel.org/patch/11463781/
- https://lkml.org/lkml/2020/3/23/52
- https://github.com/torvalds/linux/commit/056ad39ee9253873522f6469c3364964a322912b
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8
- https://security.netapp.com/advisory/ntap-20200608-0001/
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
- https://www.debian.org/security/2020/dsa-4698
- https://www.debian.org/security/2020/dsa-4699
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
- https://usn.ubuntu.com/4388-1/
- https://usn.ubuntu.com/4389-1/
- https://usn.ubuntu.com/4387-1/
- https://usn.ubuntu.com/4390-1/
- https://usn.ubuntu.com/4391-1/
- https://ubuntu.com/security/CVE-2020-12464
- https://git.kernel.org/linus/056ad39ee9253873522f6469c3364964a322912b
- https://ubuntu.com/security/notices/USN-4391-1
- https://ubuntu.com/security/notices/USN-4387-1
- https://ubuntu.com/security/notices/USN-4389-1
- https://ubuntu.com/security/notices/USN-4390-1
- https://ubuntu.com/security/notices/USN-4388-1
- https://www.cve.org/CVERecord?id=CVE-2020-12464
- https://security-tracker.debian.org/tracker/CVE-2020-12464