NetSight
IP …
high7.8

CVE-2020-29661

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.

Impact

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.26 before 4.4.248
from 4.5 before 4.9.248
from 4.10 before 4.14.212
from 4.15 before 4.19.163
from 4.20 before 5.4.83
from 5.5 before 5.9.14
FedoraprojectFedora
Versions 32, 33
DebianDebian Linux
Versions 9.0, 10.0
NetappActive Iq Unified Manager
All versions
BroadcomFabric Operating System
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappH410c Firmware
All versions
NetappA700s Firmware
All versions
Netapp8300 Firmware
All versions
Netapp8700 Firmware
All versions
NetappA400 Firmware
All versions
OracleTekelec Platform Distribution
from 7.4.0 through 7.7.1

Weakness classification

CWE-416CWE-667

References