Vulnetix
Try Vulnetix Request Demo
CVE-2020-12464 PUBLISHED

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

EPSS 0.08% · 22.6th percentile

Risk Scores

EPSS Score
0.08%
22.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:FIPS:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:18.04:LTSlinux-azure-4.150, 4.15.0-1082.92, 4.15.0-1083.93
Ubuntu:18.04:LTSlinux-oracle4.15.0-1029.32, 4.15.0-1030.33, 4.15.0-1031.34
Ubuntu:20.04:LTSlinux-aws5.4.0-1007.7, 5.4.0-1005.5, 5.3.0-1010.11
Ubuntu:16.04:LTSlinux-aws4.4.0-1001.10, 0, 4.4.0-1081.91
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1073.76+cvm1.1, 5.4.0-1063.66+cvm2.2, 5.4.0-1063.66+cvm3.2
Ubuntu:20.04:LTSlinux-gcp5.4.0-1011.11, 0, 5.3.0-1004.4
Ubuntu:20.04:LTSlinux-kvm5.4.0-1006.6, 0, 5.3.0-1003.3
Ubuntu:Pro:14.04:LTSlinux3.13.0-183.234, 3.13.0-173.224, 3.13.0-174.225
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1066.71~14.04.1, 4.15.0-1067.72~14.04.1, 4.15.0-1069.74~14.04.1
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-128.154~14.04.1, 0, 4.4.0-13.29~14.04.1
Ubuntu:20.04:LTSlinux-oracle0, 5.4.0-1011.11, 5.4.0-1009.9
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1007.8~18.04.1, 4.18.0-1008.9~18.04.1, 4.18.0-1009.10~18.04.1
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1010.15~18.04.1, 5.0.0-1011.16, 5.0.0-1013.18
Ubuntu:20.04:LTSlinux5.4.0-29.33, 0, 5.3.0-18.19
Ubuntu:24.04:LTSlinux-raspi-realtime6.8.0-2019.20, 0
Ubuntu:16.04:LTSlinux-hwe-edge4.10.0-22.24~16.04.1, 4.10.0-21.23~16.04.1, 4.10.0-20.22~16.04.1
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1017.18~18.04.1, 0, 5.3.0-1008.9~18.04.1
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-fips4.15.0-1029.34, 0, 4.15.0-1027.32
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75

…and 44 more

Timeline

References

Open in Interactive Console →