CVE-2020-12464 (NVD)

2020-04-29

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

Products Linux_kernel, Active_iq_unified_manager, Aff_a700s, Cloud_backup, Hci_baseboard_management_controller, Hci_compute_node, Hci_storage_nodes, Solidfire_\&_hci_storage_node, Solidfire_baseboard_management_controller, Steelstore_cloud_integrated_storage
Type Use After Free (CWE-416)
First patch - None (likely due to unavailable code)
Patches • https://github.com/torvalds/linux/commit/056ad39ee9253873522f6469c3364964a322912b
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b
Links • https://www.debian.org/security/2020/dsa-4699
• https://usn.ubuntu.com/4390-1/
• https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
• https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
• https://www.debian.org/security/2020/dsa-4698