NetSight
IP …
high8.1

CVE-2018-20836

An issue was discovered in the Linux kernel before 4.20.

Impact

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.16.72
from 3.17 before 3.18.140
from 3.19 before 4.4.180
from 4.5 before 4.9.175
from 4.10 before 4.14.118
from 4.15 before 4.19.42
CanonicalUbuntu Linux
Version 16.04
DebianDebian Linux
Versions 8.0, 9.0, 10.0
F5Traffix Signaling Delivery Controller
Versions 5.0.0, 5.1.0
NetappActive Iq Unified Manager
from 9.5
NetappSnapprotect
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappSolidfire \& Hci Storage Node
All versions
NetappStorage Replication Adapter For Clustered Data Ontap
All versions
NetappVasa Provider For Clustered Data Ontap
from 7.2
NetappVirtual Storage Console
from 7.2
NetappHci Compute Node
All versions

Weakness classification

CWE-362CWE-416

References