VDB

CVE-2020-36387

CVE-2020-36387 PUBLISHED

An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

EPSS 0.06% · 18.1th percentile

Risk Scores

EPSS Score
0.06%
18.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1004.5~18.04.1, 4.18.0-1005.6~18.04.1, 4.18.0-1006.7~18.04.1
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1027.29~18.04.1, *, 0
Ubuntu:16.04:LTSlinux-hwe-edge4.13.0-25.29~16.04.2, 4.13.0-19.22~16.04.1, 4.13.0-17.20~16.04.1
Ubuntu:18.04:LTSlinux-hwe5.3.0-69.65, 0, 4.18.0-13.14~18.04.1
Ubuntu:18.04:LTSlinux-gcp4.15.0-1032.34, 4.15.0-1034.36, 4.15.0-1036.38
Ubuntu:20.04:LTSlinux-raspi20, 5.3.0-1007.8, 5.3.0-1015.17
Ubuntu:18.04:LTSlinux-oem4.15.0-1081.91, 4.15.0-1079.89, 4.15.0-1073.83
Ubuntu:18.04:LTSlinux-hwe-edge5.0.0-16.17~18.04.1, 5.0.0-17.18~18.04.1, 5.0.0-19.20~18.04.1
Ubuntu:20.04:LTSlinux-oem-5.65.6.0-1013.13, 5.6.0-1011.11, 5.6.0-1007.7
Ubuntu:18.04:LTSlinux-gcp-5.3*, *, *
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1064.67, 4.15.0-1030.32, 4.15.0-1032.34
Ubuntu:18.04:LTSlinux-azure4.15.0-1008.8, *, *
Ubuntu:20.04:LTSlinux-riscv0, 5.4.0-26.30, 5.4.0-31.35
Ubuntu:18.04:LTSlinux-aws-5.00, 5.0.0-1025.28, 5.0.0-1027.30
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1014.19, *, 5.0.0-1007.12~18.04.1
Ubuntu:18.04:LTSlinux-azure-edge*, 5.0.0-1012.12~18.04.2, 4.18.0-1008.8~18.04.1
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1008.9~18.04.1, *, *
Ubuntu:18.04:LTSlinux-aws-5.35.3.0-1016.17~18.04.1, 5.3.0-1019.21~18.04.1, 5.3.0-1023.25~18.04.1

Timeline

  • Jun 7, 2021 CVE Published
  • Jun 8, 2021 EPSS Score
  • Jun 13, 2021 EPSS Score
  • Aug 9, 2021 EPSS Score
  • Dec 8, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 7, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 9, 2022 EPSS Score
  • Aug 10, 2022 EPSS Score
  • Oct 9, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›