cbcvebase.
CVE-2020-8648
published 2020-02-06

CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

Affected

22 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 5.5.13-1 (bookworm)linux 5.5.13-1 (bookworm)
googleandroid
linuxlinux_kernel<= 5.5.2
linuxlinux_kernel>= 0 < 5.5.13-15.5.13-1
linuxlinux_kernel>= 0 < 5.5.13-15.5.13-1
linuxlinux_kernel>= 0 < 5.5.13-15.5.13-1
linuxlinux_kernel>= 0 < 5.5.13-15.5.13-1
linuxlinux_kernel>= 0 < 4.4.0-178.2084.4.0-178.208
linuxlinux_kernel>= 0 < 4.15.0-99.1004.15.0-99.100
linuxlinux_kernel>= 0 < 4.4.0-178.2084.4.0-178.208
linuxlinux_kernel>= 0 < 4.4.0-184.2144.4.0-184.214
linuxlinux_kernel>= 0 < 4.15.0-99.1004.15.0-99.100
linuxlinux_kernel>= 0 < 4.15.0-106.1074.15.0-106.107
msrccbl_mariner_1.0_arm
msrccbl_mariner_1.0_x64
msrccm1_kernel_5.4.91-11_on_cbl_mariner_1.0
netapphci_baseboard_management_controller
opensuseleap

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH