CVE-2020-12464

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

• linux linux kernel (< 3.16.85) • linux linux kernel (>= 3.17 < 4.4.221) • linux linux kernel (>= 4.5 < 4.9.221) • linux linux kernel (>= 4.10 < 4.14.178) • linux linux kernel (>= 4.15 < 4.19.119) • linux linux kernel (>= 4.20 < 5.4.36) • linux linux kernel (>= 5.5 < 5.6.8) • netapp active iq unified manager • netapp cloud backup • netapp hci baseboard management controller h300s • netapp hci baseboard management controller h410c • netapp hci baseboard management controller h410s • netapp hci baseboard management controller h500s • netapp hci baseboard management controller h610c • netapp hci baseboard management controller h610s • netapp hci baseboard management controller h615c • netapp hci baseboard management controller h700s • netapp hci storage nodes • netapp solidfire \& hci storage node • netapp steelstore cloud integrated storage • netapp aff a700s • netapp hci compute node • netapp solidfire baseboard management controller