CVE-2020-15436

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

Score

CVSS 3.1 6.7 Medium

Status

Modified - securities@openeuler.org

Published

2020-11-23

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Brocade Fabric Operating System Firmware (Broadcom)
• Linux Kernel (Linux)
• A250 Firmware (Netapp)
• A700s Firmware (Netapp)
• Aff 500f Firmware (Netapp)
• Aff 8300 Firmware (Netapp)
• Aff 8700 Firmware (Netapp)
• Aff A400 Firmware (Netapp)
• Cloud Backup (Netapp)
• Fabric-attached Storage A400 Firmware (Netapp)
• Fas 500f Firmware (Netapp)
• Fas 8300 Firmware (Netapp)
• Fas 8700 Firmware (Netapp)
• H410c Firmware (Netapp)
• H610c Firmware (Netapp)
• H610s Firmware (Netapp)
• H615c Firmware (Netapp)
• Solidfire & Hci Management Node (Netapp)
• Solidfire Baseboard Management Controller Firmware (Netapp)

References

• https://lkml.org/lkml/2020/6/7/379
• https://security.netapp.com/advisory/ntap-20201218-0002/