Vulnetix
Try Vulnetix Request Demo
CVE-2018-20836 PUBLISHED

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

EPSS 3.89% · 88.2th percentile

Risk Scores

EPSS Score
3.89%
88.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-snapdragon0, 4.4.0-1081.86, 4.4.0-1079.84
Ubuntu:16.04:LTSlinux-raspi20, 4.4.0-1104.112, 4.4.0-1106.114
Ubuntu:16.04:LTSlinux-gcp4.15.0-1026.27~16.04.1, 4.15.0-1014.14~16.04.1, 4.15.0-1015.15~16.04.1
Ubuntu:18.04:LTSlinux4.15.0-24.26, 4.15.0-12.13, 4.15.0-13.14
Ubuntu:18.04:LTSlinux-aws4.15.0-1020.20, 4.15.0-1021.21, 4.15.0-1023.23
Ubuntu:18.04:LTSlinux-hwe0, 4.18.0-13.14~18.04.1
Ubuntu:16.04:LTSlinux4.4.0-13.29, 0, 4.2.0-16.19
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 5.4.0-1004.4, 5.4.0-1006.6
Ubuntu:16.04:LTSlinux-kvm4.4.0-1029.34, 4.4.0-1031.37, 4.4.0-1032.38
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1048.52, 4.4.0-1052.56, 0
Ubuntu:18.04:LTSlinux-kvm4.15.0-1027.27, 4.15.0-1026.26, 4.15.0-1025.25
Ubuntu:16.04:LTSlinux-aws4.4.0-1052.61, 4.4.0-1070.80, 4.4.0-1069.79
Ubuntu:16.04:LTSlinux-hwe4.13.0-38.43~16.04.1, 4.13.0-37.42~16.04.1, 4.13.0-36.40~16.04.1
Ubuntu:Pro:14.04:LTSlinux3.13.0-153.203, 0, 3.11.0-12.19
Ubuntu:22.04:LTSlinux-riscv5.15.0-1023.27, 5.13.0-1004.4, 5.13.0-1006.6+22.04.1
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1005.6~18.04.1, 0, 4.18.0-1004.5~18.04.1
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1005.5, 4.4.0-1006.6, 4.4.0-1008.10
Ubuntu:20.04:LTSlinux-gke5.4.0-1071.76, 5.4.0-1068.71, 5.4.0-1067.70
Ubuntu:14.04:LTSlinux-azure0, 4.15.0-1036.38~14.04.2, 4.15.0-1035.36~14.04.2
Ubuntu:18.04:LTSlinux-oem4.15.0-1013.16, 4.15.0-1015.18, 4.15.0-1002.3

…and 12 more

Timeline

References

Open in Interactive Console →