CVE-2020-8648

CVE	CVE-2020-8648
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-02-06 01:15:00 UTC
Updated	2022-07-28 00:08:00 UTC
Description	There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

Problem Types: CWE-416

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Broadcom	Brocade Fabric Operating System Firmware	-	All	All	All
Operating System	Canonical	Ubuntu Linux	14.04	All	All	All
Operating System	Canonical	Ubuntu Linux	16.04	All	All	All
Operating System	Canonical	Ubuntu Linux	16.04	All	All	All
Operating System	Canonical	Ubuntu Linux	18.04	All	All	All
Operating System	Debian	Debian Linux	8.0	All	All	All
Operating System	Linux	Linux Kernel	All	All	All	All
Application	Netapp	Active Iq Unified Manager	-	All	All	All
Application	Netapp	Cloud Backup	-	All	All	All
Application	Netapp	Hci Baseboard Management Controller	h410c	All	All	All
Application	Netapp	Solidfire Baseboard Management Controller	-	All	All	All
Operating System	Opensuse	Leap	15.1	All	All	All

Reference	Source	Link	Tags
USN-4345-1: Linux kernel vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
CVE-2020-8648 Linux Kernel Vulnerability in NetApp Products \| NetApp Product Security	CONFIRM	security.netapp.com
USN-4342-1: Linux kernel vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
USN-4344-1: Linux kernel vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
206361 – Linux Kernel 5.4.7 - n_tty_receive_buf_common use-after-free	MISC	bugzilla.kernel.org	Exploit, Issue Tracking, Vendor Advisory
[security-announce] openSUSE-SU-2020:0336-1: important: Security update	SUSE	lists.opensuse.org
USN-4346-1: Linux kernel vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
[SECURITY] [DLA 2241-2] linux security update	MLIST	lists.debian.org
[SECURITY] [DLA 2242-1] linux-4.9 security update	MLIST	lists.debian.org
[SECURITY] [DLA 2241-1] linux security update	MLIST	lists.debian.org
Debian -- Security Information -- DSA-4698-1 linux	DEBIAN	www.debian.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

159258 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-2314)
159684 Oracle Enterprise Linux Security Update for kernel (ELSA-2020-4431)
239403 Red Hat Update for kernel (RHSA-2021:2314)
239452 Red Hat Update for kernel-rt (RHSA-2021:2316)
257092 CentOS Security Update for kernel (CESA-2021:2314)
352362 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2020-006
377065 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2020:0113)
900078 CBL-Mariner Linux Security Update for kernel 5.4.91
903022 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (1926)
906202 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (1926-1)
940256 AlmaLinux Security Update for kernel (ALSA-2020:4431)