CVE-2018-20836

 

Published at: - 07-05-2019 04:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/torvalds/linux/commit/b90cd6f2b905905fb42671009dc0e27c310a16ae
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b90cd6f2b905905fb42671009dc0e27c310a16ae
• 108196-
• https://support.f5.com/csp/article/K11225249
• https://security.netapp.com/advisory/ntap-20190719-0003/
• openSUSE-SU-2019:1716-
• openSUSE-SU-2019:1757-
• USN-4076-1-
• DSA-4495-
• 20190812 [SECURITY] [DSA 4495-1] linux security update-
• DSA-4497-
• 20190813 [SECURITY] [DSA 4497-1] linux security update-
• [debian-lts-announce] 20190814 [SECURITY] [DLA 1884-1] linux security update-
• [debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update-

 

Keywords

NVD

 

CVE-2018-20836

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures