CVEvulnerability

CVE-2020-15436

6.7 MEDIUM Published 2020-11-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

Affected configurations

• linux linux kernel (>= 2.6.38 < 4.4.229) • linux linux kernel (>= 4.5 < 4.9.229) • linux linux kernel (>= 4.10 < 4.14.186) • linux linux kernel (>= 4.15 < 4.19.130) • linux linux kernel (>= 4.20 < 5.4.49) • linux linux kernel (>= 5.5 < 5.7.6) • broadcom brocade fabric operating system firmware • netapp cloud backup • netapp solidfire \& hci management node • netapp solidfire baseboard management controller firmware • netapp h410c firmware • netapp h610c firmware • netapp h610s firmware • netapp h615c firmware • netapp a700s firmware • netapp aff 8700 firmware • netapp fas 8700 firmware • netapp aff 8300 firmware • netapp fas 8300 firmware • netapp aff a400 firmware • netapp fabric-attached storage a400 firmware • netapp a250 firmware • netapp aff 500f firmware • netapp fas 500f firmware

Related

Weakness · CWE (1)

References