UBUNTU-CVE-2020-29660

Advisory lineage Upstream: 1 Downstream: 7
Published: 09 Dec 2020, 17:15
Last modified:03 Jun 2026, 13:34

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.4 MEDIUM
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Dec 2020, 17:15
Published
Vulnerability first disclosed
03 Jun 2026, 13:34
Last Modified
Vulnerability information updated

Description

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

CVSS Metrics

  • v3.1MEDIUMScore: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected Systems

  • ubuntulinux

    < 3.13.0-188.239 | < 4.4.0-203.235 | < 4.15.0-136.140 | < 5.4.0-66.74

  • ubuntulinux-aws

    < 4.4.0-1086.90 | < 4.4.0-1122.136 | < 4.15.0-1094.101 | < 5.4.0-1038.40

  • ubuntulinux-aws-5.0

    all

  • ubuntulinux-aws-5.3

    all

  • ubuntulinux-aws-5.4

    < 5.4.0-1038.40~18.04.1

  • ubuntulinux-aws-fips

    < 4.15.0-2037.39 | all | < 5.4.0-1069.73+fips2

  • ubuntulinux-aws-hwe

    < 4.15.0-1094.101~16.04.1

  • ubuntulinux-azure

    < 4.15.0-1108.120~14.04.1 | < 4.15.0-1108.120~16.04.1 | all | < 5.4.0-1040.42

  • ubuntulinux-azure-4.15

    < 4.15.0-1108.120

  • ubuntulinux-azure-5.3

    all

  • ubuntulinux-azure-5.4

    < 5.4.0-1040.42~18.04.1

  • ubuntulinux-azure-edge

    all

  • ubuntulinux-azure-fde-5.15

    all

  • ubuntulinux-azure-fips

    < 4.15.0-2020.23 | all | < 5.4.0-1073.76+fips1

  • ubuntulinux-bluefield

    all

  • ubuntulinux-dell300x

    < 4.15.0-1012.16

  • ubuntulinux-fips

    < 4.4.0-1056.62 | all | < 4.15.0-1053.61

  • ubuntulinux-gcp

    < 4.15.0-1093.106~16.04.1 | all | < 5.4.0-1037.40

  • ubuntulinux-gcp-4.15

    < 4.15.0-1093.106

  • ubuntulinux-gcp-5.3

    all

  • ubuntulinux-gcp-5.4

    < 5.4.0-1037.40~18.04.1

  • ubuntulinux-gcp-edge

    all

  • ubuntulinux-gcp-fips

    all | < 5.4.0-1067.71~20.04.1

  • ubuntulinux-gke

    < 5.4.0-1036.38

  • ubuntulinux-gke-4.15

    < 4.15.0-1079.84

  • ubuntulinux-gke-5.4

    < 5.4.0-1036.38~18.04.1

  • ubuntulinux-gkeop

    < 5.4.0-1010.11

  • ubuntulinux-gkeop-5.4

    < 5.4.0-1010.11~18.04.1

  • ubuntulinux-hwe

    < 4.15.0-136.140~16.04.1 | all

  • ubuntulinux-hwe-5.4

    < 5.4.0-66.74~18.04.2

  • ubuntulinux-hwe-5.8

    < 5.8.0-44.50~20.04.1

  • ubuntulinux-hwe-edge

    all | all

  • ubuntulinux-intel-iot-realtime

    all

  • ubuntulinux-kvm

    < 4.4.0-1088.97 | < 4.15.0-1085.87 | < 5.4.0-1033.34

  • ubuntulinux-lts-xenial

    < 4.4.0-203.235~14.04.1

  • ubuntulinux-nvidia

    all

  • ubuntulinux-oem

    all

  • ubuntulinux-oem-5.6

    < 5.6.0-1048.52

  • ubuntulinux-oracle

    < 4.15.0-1065.73~16.04.1 | < 4.15.0-1065.73 | < 5.4.0-1038.41

  • ubuntulinux-oracle-5.0

    all

  • ubuntulinux-oracle-5.3

    all

  • ubuntulinux-oracle-5.4

    < 5.4.0-1038.41~18.04.1

  • ubuntulinux-raspi

    < 5.4.0-1029.32

  • ubuntulinux-raspi-5.4

    < 5.4.0-1029.32~18.04.1

  • ubuntulinux-raspi-realtime

    all

  • ubuntulinux-raspi2

    < 4.4.0-1146.156 | < 4.15.0-1079.84 | all

  • ubuntulinux-realtime

    all

  • ubuntulinux-riscv

    all

  • ubuntulinux-riscv-5.8

    < 5.8.0-17.19~20.04.1

  • ubuntulinux-snapdragon

    < 4.4.0-1150.160 | < 4.15.0-1096.105

References (11)