NetSight
IP …
medium6.7

CVE-2020-12464

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad3…

Impact

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.16.85
from 3.17 before 4.4.221
from 4.5 before 4.9.221
from 4.10 before 4.14.178
from 4.15 before 4.19.119
from 4.20 before 5.4.36
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappHci Baseboard Management Controller
Versions h300s, h410c, h410s, h500s, h610c, h610s
NetappHci Storage Nodes
All versions
NetappSolidfire \& Hci Storage Node
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappAff A700s
All versions
NetappHci Compute Node
All versions
NetappSolidfire Baseboard Management Controller
All versions

Weakness classification

CWE-416

References