CVE-2020-14416: Use After Free
Published Jun 18, 2020
·Updated
In the Linux kernel before 5.4.16, a race condition in tty->discdata handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.
Affected Software
3 affected components
Linux Linux kernel<5.4.16
openSUSE Leap=15.1
openSUSE Leap=15.2
Remediation
Patch Available
Event History
Jun 18, 2020
CVE Published
via MITRE·10:45 AM
Data Sourced
via MITRE·10:45 AM
Description
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access is required to exploit this issue?
The CVSS vector indicates that exploitation requires local access and high privileges, as well as user interaction. It is not described as remotely exploitable.
2
What is the expected security impact if exploitation succeeds?
The reported impact is on availability, with high availability impact. No confidentiality or integrity impact is indicated in the CVSS vector.
3
What should affected systems do to remediate the issue?
Apply the available patch. The issue affects Linux kernel versions before 5.4.16.