CVEvulnerability

CVE-2020-27784

5.5 MEDIUM Published 2022-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-201, CWE-416

Description

A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev instance. However, use-after-free arises because it had been freed by gprinter_free().

Affected configurations

• linux linux kernel (>= 4.1 < 4.4.241) • linux linux kernel (>= 4.5 < 4.9.241) • linux linux kernel (>= 4.10 < 4.19.154) • linux linux kernel (>= 4.20 < 5.4.73) • linux linux kernel (>= 5.5 < 5.8.17) • linux linux kernel (>= 5.9.0 < 5.9.2)

Related

Weakness · CWE (2)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness
  • CWE-416 Use After Free weakness

References