NetSight
IP …
medium4.4

CVE-2020-29660

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.

Impact

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.9.13
FedoraprojectFedora
Versions 32, 33
DebianDebian Linux
Versions 9.0, 10.0
NetappActive Iq Unified Manager
All versions
BroadcomFabric Operating System
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappH410c Firmware
All versions
NetappA700s Firmware
All versions
Netapp8300 Firmware
All versions
Netapp8700 Firmware
All versions
NetappA400 Firmware
All versions

Weakness classification

CWE-416CWE-667

References